last executing test programs: 4m40.552681992s ago: executing program 4 (id=2871): r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000180)={&(0x7f0000000000)=""/70, 0x8000, 0x1000, 0x0, 0x7}, 0x20) dup2(r1, r0) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000340)=0x8000, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000300)={'batadv_slave_1\x00', 0x0}) bind$xdp(r1, &(0x7f0000000100)={0x2c, 0x0, r3}, 0x10) recvmmsg(r0, &(0x7f000000b240)=[{{0x0, 0x0, 0x0}, 0xfffffffb}], 0x1, 0x40004002, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="ac000000210001002abd7000fddbdf25ff010000000000000000000000000001fc0200000000000000000000000000014e2210004e24a61f0200008029000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="b06b6e00020000000c001c00", @ANYRES32=0x0, @ANYBLOB="010000005000110064010101000000000000000000000000ff010000000000000000000000000001fe80000000000000000000000000003e64010100000000000000000000000000ff0400000635000002000a00"], 0xac}, 0x1, 0x0, 0x0, 0x810}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB="28000000400007012bbd700001000000047c000008004280040007000c0001800600060080"], 0x28}, 0x1, 0x0, 0x0, 0x48815}, 0xc020) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r4) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000200)={'tunl0\x00', &(0x7f0000000640)={'syztnl1\x00', 0x0, 0x7800, 0x48, 0xfffffe01, 0x2, {{0x2d, 0x4, 0x1, 0x4, 0xb4, 0x65, 0x0, 0xe, 0x2f, 0x0, @local, @remote, {[@timestamp_prespec={0x44, 0x2c, 0x99, 0x3, 0x5, [{@empty, 0x60a2ab25}, {@multicast2, 0x80000001}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x70000}, {@local, 0x25c}, {@private=0xa010101, 0x4}]}, @timestamp_prespec={0x44, 0x34, 0xf4, 0x3, 0x3, [{@rand_addr=0x64010100}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x200}, {@dev={0xac, 0x14, 0x14, 0x23}, 0x6}, {@multicast1, 0x3aa4000}, {@dev={0xac, 0x14, 0x14, 0x42}, 0x3}, {@rand_addr=0x64010102, 0x4}]}, @ra={0x94, 0x4}, @timestamp={0x44, 0x8, 0xc4, 0x0, 0x2, [0x1]}, @generic={0x82, 0x3, "ad"}, @timestamp_addr={0x44, 0xc, 0xa9, 0x1, 0x2, [{@local, 0x7fffffff}]}, @timestamp_prespec={0x44, 0x24, 0x91, 0x3, 0x2, [{@private=0xa010102, 0x8}, {@rand_addr=0x64010100, 0x4883}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x6}, {@dev={0xac, 0x14, 0x14, 0xa}, 0x4}]}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r4, 0x8933, &(0x7f0000000240)={'wg0\x00'}) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000280), &(0x7f00000002c0)=0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'nr0\x00'}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'pimreg0\x00'}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000400)={'ip_vti0\x00', &(0x7f0000000380)={'syztnl0\x00', 0x0, 0x8000, 0x7, 0xffffff00, 0x9, {{0x5, 0x4, 0x0, 0x2e, 0x14, 0x66, 0x0, 0x0, 0x29, 0x0, @loopback, @remote}}}}) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0xffd}, 0x2a, 0x0) r7 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) keyctl$read(0xb, r7, 0x0, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001240)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0x4000000, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0x1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x2c, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x1, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {0xff}, 0x0, 0x1}}]}}]}, 0x58}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000540)={'sit0\x00', &(0x7f0000000500)={'gretap0\x00', 0x0, 0x700, 0x7800, 0xf4, 0x5, {{0x6, 0x4, 0x2, 0x17, 0x18, 0x0, 0x0, 0x7, 0x29, 0x0, @remote, @private=0xa010100, {[@end]}}}}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000600)={'syztnl0\x00', &(0x7f0000000580)={'syztnl2\x00', 0x0, 0x2f, 0x1a, 0x2, 0x0, 0x48, @local, @empty, 0x40, 0x80, 0x3, 0xc}}) 4m39.529875448s ago: executing program 4 (id=2876): accept4(0xffffffffffffffff, 0x0, &(0x7f0000000100), 0x0) socket$inet(0x10, 0x3, 0x0) (async) r0 = socket$inet(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x28, r2, 0x1, 0x0, 0x25dfdbfc, {}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xe, 0x1, @l2={'eth', 0x3a, 'vlan0\x00'}}]}]}, 0x28}}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0xac, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r3, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x7c, 0x2, [@TCA_TAPRIO_ATTR_TXTIME_DELAY={0x8, 0xb, 0xe}, @TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x5, 0x4, 0x2, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x9, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4000000}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x7}]}}]}, 0xac}}, 0x0) (async) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0xac, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r3, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x7c, 0x2, [@TCA_TAPRIO_ATTR_TXTIME_DELAY={0x8, 0xb, 0xe}, @TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x5, 0x4, 0x2, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x9, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4000000}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x7}]}}]}, 0xac}}, 0x0) 4m39.336043921s ago: executing program 4 (id=2879): ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000000)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_GET_STATS(r0, 0x80f86406, &(0x7f0000000040)=""/235) ioctl$DRM_IOCTL_AUTH_MAGIC(r0, 0x40046411, &(0x7f0000000140)=0xadd3) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_LEAVE_OCB(r1, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x28, r2, 0x4, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x1, 0x33}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0xc0}, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000300)=[0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_GETGAMMA(r0, 0xc02064a4, &(0x7f0000000440)={r4, 0x5, &(0x7f0000000380)=[0x4, 0x1, 0x7, 0xd, 0x6], &(0x7f00000003c0)=[0x5, 0x8b8, 0x41, 0x5, 0xff50, 0xe, 0x6, 0x69, 0x7], &(0x7f0000000400)=[0x1, 0x1, 0xb, 0x6810, 0x401, 0x2, 0x9, 0xd0, 0x7ff, 0x5]}) ioctl$DRM_IOCTL_MODE_GET_LEASE(r0, 0xc01064c8, &(0x7f00000004c0)={0x4, 0x0, &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f0000000600)={&(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000005c0)=[0x0, 0x0], 0x5, r4, 0xdededede}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f00000006c0)={0x501, 0x5, &(0x7f0000000500)=[r4, r5, r5, r5, r6], &(0x7f0000000540)=[0x4, 0x3ff, 0xc], &(0x7f0000000640)=[r7], &(0x7f0000000680)=[0x400, 0xb0a6, 0xa5, 0x1, 0x5fa9, 0xffffffffffffffff], 0x0, 0x8000000000000001}) bind(0xffffffffffffffff, &(0x7f0000000700)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x0, 0x1, 0x1, 0x1, {0xa, 0x4e20, 0xac6, @mcast2, 0x3}}}, 0x80) ioctl$DRM_IOCTL_MODE_GETFB2(r0, 0xc06864ce, &(0x7f0000000780)={r6, 0x1, 0x7f, 0x5, 0x1, [], [0x22dd, 0x7, 0x9e, 0x9], [0xfffffff4, 0x8, 0x1, 0x1], [0x40, 0x2, 0x9, 0x3]}) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f0000000800)={0x0}) ioctl$DRM_IOCTL_SWITCH_CTX(r0, 0x40086424, &(0x7f0000000840)={r8, 0x1}) r9 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000880), 0x1, 0x0) write$binfmt_register(r9, &(0x7f00000008c0)={0x3a, 'syz2', 0x3a, 'M', 0x3a, 0x531a3342, 0x3a, '\\+\'', 0x3a, 'wlan0\x00', 0x3a, './file0', 0x3a, [0x50]}, 0x31) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r10, 0x29, 0x2f, &(0x7f0000000900)={0x0, {{0xa, 0x4e20, 0x2, @loopback, 0x2}}, {{0xa, 0x4e21, 0x7, @mcast2, 0x9}}}, 0x108) socket$nl_netfilter(0x10, 0x3, 0xc) r11 = openat2(0xffffffffffffff9c, &(0x7f0000000a40)='./file0\x00', &(0x7f0000000a80)={0x40001, 0x4, 0x34}, 0x18) r12 = signalfd(r11, &(0x7f0000000ac0), 0x8) ioctl$EXT4_IOC_GETSTATE(r10, 0x40046629, &(0x7f0000000b00)) sendmsg$NFT_BATCH(r12, &(0x7f0000000fc0)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000f80)={&(0x7f0000000b80)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWFLOWTABLE={0x20, 0x16, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x8}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_NEWOBJ={0x1c, 0x12, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, @NFT_OBJECT_TUNNEL=@NFTA_OBJ_TYPE={0x8}}, @NFT_MSG_NEWSET={0x34, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x5}]}]}, @NFT_MSG_DELFLOWTABLE={0x288, 0x18, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x6}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0xc0, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0xa4, 0x3, 0x0, 0x1, [{0x14, 0x1, 'macvlan1\x00'}, {0x14, 0x1, 'bridge0\x00'}, {0x14, 0x1, 'veth1_to_hsr\x00'}, {0x14, 0x1, 'ip6gre0\x00'}, {0x14, 0x1, 'wg1\x00'}, {0x14, 0x1, 'ip6erspan0\x00'}, {0x14, 0x1, 'ipvlan0\x00'}, {0x14, 0x1, 'syz_tun\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x10001}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x40}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}, @NFTA_FLOWTABLE_HOOK={0x110, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0xcc, 0x3, 0x0, 0x1, [{0x14}, {0x14, 0x1, 'syz_tun\x00'}, {0x14, 0x1, 'veth0\x00'}, {0x14, 0x1, 'wlan0\x00'}, {0x14, 0x1, 'bridge_slave_0\x00'}, {0x14, 0x1, 'macvtap0\x00'}, {0x14, 0x1, 'syzkaller1\x00'}, {0x14, 0x1, 'wlan1\x00'}, {0x14, 0x1, 'dummy0\x00'}, {0x14, 0x1, 'ip6tnl0\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xdf06}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x7}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}, @NFTA_FLOWTABLE_HOOK={0x8c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_FLOWTABLE_HOOK_DEVS={0x68, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth1_to_hsr\x00'}, {0x14, 0x1, 'team0\x00'}, {0x14, 0x1, 'batadv_slave_1\x00'}, {0x14, 0x1, 'netdevsim0\x00'}, {0x14, 0x1, 'ip_vti0\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x3}]}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWOBJ={0x1c, 0x12, 0xa, 0x5, 0x0, 0x0, {0x2, 0x0, 0x4}, @NFT_OBJECT_SYNPROXY=@NFTA_OBJ_TYPE={0x8}}, @NFT_MSG_NEWSET={0xc4, 0x9, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x25}, @NFTA_SET_EXPRESSIONS={0x84, 0x12, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_LIMIT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0xffffffffffffff8a}]}}}, {0x10, 0x1, 0x0, 0x1, @range={{0xa}, @void}}, {0x38, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_NAT_TYPE={0x8}, @NFTA_NAT_FAMILY={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_NAT_REG_PROTO_MAX={0x8, 0x6, 0x1, 0x0, 0x13}, @NFTA_NAT_FAMILY={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_NAT_REG_PROTO_MAX={0x8, 0x6, 0x1, 0x0, 0x1b}]}}}, {0x10, 0x1, 0x0, 0x1, @inner={{0xa}, @void}}]}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x9}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x31}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x400}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) mknod(&(0x7f0000001000)='./file0\x00', 0x4, 0x3) r13 = add_key$fscrypt_provisioning(&(0x7f0000001040), &(0x7f0000001080)={'syz', 0x0}, &(0x7f00000010c0)={0x2, 0x0, @auto=[0x1c, 0x20]}, 0xa, 0xfffffffffffffffc) keyctl$get_security(0x11, r13, &(0x7f0000001100)=""/4096, 0x1000) ioctl$BTRFS_IOC_START_SYNC(r9, 0x80089418, &(0x7f0000002100)=0x0) ioctl$BTRFS_IOC_RM_DEV_V2(r12, 0x5000943a, &(0x7f0000002140)={{r10}, r14, 0xe, @unused=[0xfffffffffffffffb, 0xe, 0x7ff], @subvolid=0x4}) 4m39.161476595s ago: executing program 4 (id=2880): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="087f00006e7bf004326dc4ab70c04a0400000004", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000025000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$alg(0x26, 0x5, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="20000000400019070000000000000025037c00"], 0x20}, 0x1, 0x0, 0x0, 0x48814}, 0xc000) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r3, 0x0, 0x6, &(0x7f0000000180)=0x80000001, 0x4) ioctl$TCSETS(r2, 0x40045431, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000280)=ANY=[@ANYBLOB="12014101f2c59620d016b8108ede0102030109022400010000080009040002020083ec0009050602000202000a090582020002000110"], 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$l2tp6(0xa, 0x2, 0x73) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]}) chdir(0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xc5fffffd) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) syz_io_uring_submit(0x0, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x35, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x15}, 0x76) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r6, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 4m36.401623423s ago: executing program 4 (id=2888): sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x89a0, 0x0) syz_open_procfs(0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x20000000) connect$pppoe(r1, &(0x7f0000000400)={0x18, 0x0, {0x2, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, 'lo\x00'}}, 0x1e) r3 = socket$pppoe(0x18, 0x1, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sys_enter\x00', r4}, 0x10) syncfs(0xffffffffffffffff) connect$pppoe(r3, &(0x7f0000000100)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r3, 0x80047437, &(0x7f0000000080)) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$PPPIOCATTCHAN(r5, 0x40047438, &(0x7f0000000040)=0x2) ioctl$PPPIOCBRIDGECHAN(r5, 0x40047435, &(0x7f0000000200)=0x1) ioctl$int_out(r5, 0xa524338bc0cc4a33, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r6, 0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) r7 = eventfd(0x0) read$eventfd(r7, &(0x7f0000000240), 0x8) writev(r7, &(0x7f0000000080)=[{&(0x7f0000001100)="050000005ec3de3d", 0x8}], 0x1) 4m36.345056074s ago: executing program 4 (id=2889): ioctl$KVM_SET_DEBUGREGS(0xffffffffffffffff, 0x4080aea2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=@gettclass={0x24, 0x2a, 0x0, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x6}, {0xa, 0xffff}, {0x3, 0xc}}}, 0x24}, 0x1, 0x0, 0x0, 0x4011}, 0x0) syz_usb_connect$cdc_ncm(0x4, 0xd1, &(0x7f0000000040)=ANY=[@ANYBLOB="12011003020000182505a1a44000010203010902bf0002010650000900000000020d00000524060001082400a9b30d240f010a0000000300ff000606241a05001407240a050905580c240c00000000a90c0900030424020204"], 0x0) syz_init_net_socket$rose(0xb, 0x5, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) pselect6(0x40, &(0x7f0000000280)={0xe, 0x3, 0x4009, 0xb817, 0xfffffffffffffff9, 0x5, 0x80000000, 0x7}, 0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000040), 0x200041, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r4}}) splice(r3, 0x0, r2, 0x0, 0xffffffffffff8000, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000b80)=@raw={'raw\x00', 0x3c1, 0x3, 0x350, 0x0, 0x1170, 0x1170, 0x128, 0x1170, 0x280, 0x1398, 0x1398, 0x280, 0x1398, 0x3, 0x0, {[{{@ipv6={@loopback, @private2={0xfc, 0x2, '\x00', 0x1}, [0xffffffff, 0xff000000], [0x0, 0x0, 0x0, 0xffffff00], 'veth0_vlan\x00', 'veth0_vlan\x00', {}, {}, 0x2e}, 0x0, 0x108, 0x128, 0x0, {}, [@common=@ipv6header={{0x28}, {0xa}}, @common=@unspec=@quota={{0x38}, {0x1, 0x0, 0x80000000, {0x7fff}}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0xf0, 0x158, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x0, 'syz0\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x2, 0x9, 0xf, 0xd18, 'syz0\x00', 'syz1\x00', {0x7}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b0) r5 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$can_j1939(r5, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) bind$can_j1939(r5, &(0x7f00000000c0)={0x1d, r6}, 0x18) connect$can_j1939(r5, &(0x7f0000000140)={0x1d, r6, 0x0, {0x1, 0xff, 0xa8fe8ad4eea2351f}, 0x2}, 0x18) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)) r8 = socket$l2tp6(0xa, 0x2, 0x73) r9 = dup3(r8, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r9, 0x0, 0x0, 0x810) r10 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_DEL_PMKSA(r10, 0x0, 0x40000) sendmmsg(r5, &(0x7f0000003e40), 0x3fffffffffffe3d, 0xf5) 4m20.552490111s ago: executing program 32 (id=2889): ioctl$KVM_SET_DEBUGREGS(0xffffffffffffffff, 0x4080aea2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=@gettclass={0x24, 0x2a, 0x0, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x6}, {0xa, 0xffff}, {0x3, 0xc}}}, 0x24}, 0x1, 0x0, 0x0, 0x4011}, 0x0) syz_usb_connect$cdc_ncm(0x4, 0xd1, &(0x7f0000000040)=ANY=[@ANYBLOB="12011003020000182505a1a44000010203010902bf0002010650000900000000020d00000524060001082400a9b30d240f010a0000000300ff000606241a05001407240a050905580c240c00000000a90c0900030424020204"], 0x0) syz_init_net_socket$rose(0xb, 0x5, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) pselect6(0x40, &(0x7f0000000280)={0xe, 0x3, 0x4009, 0xb817, 0xfffffffffffffff9, 0x5, 0x80000000, 0x7}, 0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000040), 0x200041, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r4}}) splice(r3, 0x0, r2, 0x0, 0xffffffffffff8000, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000b80)=@raw={'raw\x00', 0x3c1, 0x3, 0x350, 0x0, 0x1170, 0x1170, 0x128, 0x1170, 0x280, 0x1398, 0x1398, 0x280, 0x1398, 0x3, 0x0, {[{{@ipv6={@loopback, @private2={0xfc, 0x2, '\x00', 0x1}, [0xffffffff, 0xff000000], [0x0, 0x0, 0x0, 0xffffff00], 'veth0_vlan\x00', 'veth0_vlan\x00', {}, {}, 0x2e}, 0x0, 0x108, 0x128, 0x0, {}, [@common=@ipv6header={{0x28}, {0xa}}, @common=@unspec=@quota={{0x38}, {0x1, 0x0, 0x80000000, {0x7fff}}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0xf0, 0x158, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x0, 'syz0\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x2, 0x9, 0xf, 0xd18, 'syz0\x00', 'syz1\x00', {0x7}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b0) r5 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$can_j1939(r5, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) bind$can_j1939(r5, &(0x7f00000000c0)={0x1d, r6}, 0x18) connect$can_j1939(r5, &(0x7f0000000140)={0x1d, r6, 0x0, {0x1, 0xff, 0xa8fe8ad4eea2351f}, 0x2}, 0x18) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)) r8 = socket$l2tp6(0xa, 0x2, 0x73) r9 = dup3(r8, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r9, 0x0, 0x0, 0x810) r10 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_DEL_PMKSA(r10, 0x0, 0x40000) sendmmsg(r5, &(0x7f0000003e40), 0x3fffffffffffe3d, 0xf5) 52.700590937s ago: executing program 1 (id=3187): syz_usb_connect(0x0, 0x49, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000ec13b2106d04d308280b010203010902370001"], 0x0) openat$mice(0xffffffffffffff9c, &(0x7f00000000c0), 0x8501) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xc, &(0x7f0000000140)={0xbc, 0x8b}, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) open(&(0x7f00009e1000)='./file0\x00', 0x8060, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000002400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB="4ca96f6f746d6f64653d30303030303030303030303030d53030303130303030302c757365725f69643d", @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',max_read=0x0000000000000004,\x00']) read$FUSE(r1, &(0x7f0000000200)={0x2020, 0x0, 0x0}, 0x2020) open(&(0x7f00000000c0)='./file0\x00', 0x1f, 0x300) write$FUSE_INIT(r1, &(0x7f0000002280)={0x50, 0x0, r2, {0x7, 0x9, 0xfffffcf3, 0x14014541, 0xa, 0x2, 0x9, 0x0, 0x0, 0x0, 0x2}}, 0x50) read$FUSE(r1, &(0x7f0000004580)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_NOTIFY_STORE(r1, &(0x7f0000002300)=ANY=[@ANYBLOB="290000000400000000000000000000000100000000000000ffef0000000000005cdca9d1b4ec857393268900637f0ed50733ae6d0411f19cc72176c4ce458a3250c1ad01455bde240733f28ea5d59c301e9fc7650a300730074538959bc9d487b4b0046e5a27208fd69e47c57cadbe38e82d3579264367f5fd81d28c49cb75f09d2f726651a5e582d0559783c9506e3142c540a464fd56f839844fa5ac4bb9818917cac483438a06dee594e59e3067ae7dfdf725a62719e2dae142d0cfb202c8fa5a28ac213642b1929433c181df95acfbd097fa41abe12fd968bbb80c0f1f82e98b"], 0x29) write$FUSE_INTERRUPT(r1, &(0x7f0000002240)={0x10, 0xffffffffffffffda, r3}, 0x10) close_range(r0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() openat(0xffffffffffffff9c, 0x0, 0x2040, 0x0) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000340)={{}, 0x0, &(0x7f0000000180)='%pK \x00'}, 0x20) 50.223951023s ago: executing program 1 (id=3201): r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) r1 = socket$inet6(0xa, 0x3, 0x38) setsockopt$inet6_int(r1, 0x29, 0x7, &(0x7f0000000040)=0xefbe, 0x4) syz_usb_disconnect(r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000a00)={0x14, 0x35, 0x1, 0x70bd29, 0x25dfdbfe, {0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x4004}, 0x40008010) r3 = syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[], 0x0) socket$vsock_stream(0x2d, 0x1, 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000700)={0x84, &(0x7f0000000040)=ANY=[@ANYBLOB="400802000000b8a60961e95b4a44b0b4b2c821b98069ff82786e1bc72e0d7f3173b27d08bcecb99add67131265b0441efedf9e2a11d466a695c028fcf2d2a06359c4aeb0488d38aaa918dd21445bbcd41636aefe222909fec3e97c65567d35c1e72bbd165ad4b315a14ab8b58cf630ae6382a22c08d1deb9d2ac060f738424e01edb713184c56baad7147aa9a3a4f65ed6de97487228ee49a6d2ef00d009574c7531e7387f194b67a00ba820fe8cc4238b73a9bbadbd5a3b6784034d7aad1a519cb5cb11fbcebc2f8adc6b57bfbd9de90cdd05837b1b14bd7a46b88958fae303c1f8daedf5ae6903d5a9f853a92b6567"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_connect$printer(0x1, 0x2d, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0x7, 0x1, 0x3, 0x20, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x8, 0x90, 0x7, [{{0x9, 0x4, 0x0, 0x81, 0x2, 0x0, 0x0, 0x0, 0x57, "", {{{0x9, 0x5, 0x1, 0x2, 0x3ff, 0x6e, 0x10, 0x1}}}}}]}}]}}, &(0x7f0000000380)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x201, 0xb, 0x6, 0x4e, 0x8, 0x4}, 0xc8, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x3, [{0xe, &(0x7f00000002c0)=@string={0xe, 0x3, "fb317487ca2df515d9d057b2"}}, {0x9, &(0x7f0000000300)=@string={0x9, 0x3, "2beca1f9cb4421"}}, {0x4, &(0x7f0000000340)=@lang_id={0xfffffffffffffe56, 0x3, 0xf0ff}}]}) 46.50299554s ago: executing program 1 (id=3219): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001f40)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r0, 0x1, 0x4c, &(0x7f0000000080), 0xfe41) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ff8000/0x1000)=nil, 0x0}, 0x68) process_vm_writev(0x0, &(0x7f0000000240)=[{0x0}, {0x0}, {&(0x7f0000000400)=""/129, 0x81}], 0x3, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x4e0, &(0x7f0000000040)={0x0, 0x36d, 0xc010, 0x3, 0x16f}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0xfffffffffffffda2, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet(0xa, 0x801, 0x84) connect$inet(r2, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r2, 0x8) r3 = accept4(r2, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x3}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r3, 0x84, 0x7c, &(0x7f0000001400)={0x0, 0x0, 0x7a}, 0x8) r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000500)=ANY=[@ANYBLOB="12010000000000207d1e5a2d00000000000109022400010000000009040000010300000009210000000122080009058103"], 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io$hid(r4, &(0x7f0000000940)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="002208000000a20100c3"], 0x0}, 0x0) r5 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) ioctl$HIDIOCGFIELDINFO(r5, 0xc038480a, &(0x7f0000000340)={0x1, 0x1, 0x300000, 0x9, 0x1, 0xfffffffe, 0x9, 0x400, 0x1ff, 0x2, 0x6, 0x1, 0xa, 0x3}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x7, 0x5, &(0x7f0000000400)=@framed={{0x18, 0x8}, [@btf_id={0x18, 0x7, 0x3, 0x0, 0x1}]}, &(0x7f0000000000)='GPL\x00', 0x4}, 0x94) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x24, &(0x7f0000000000)=0xa, 0x4) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 42.526304036s ago: executing program 1 (id=3234): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x40000}, 0x48000) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x101091, 0x0) open_tree(0xffffffffffffff9c, 0x0, 0x89901) umount2(&(0x7f0000000380)='./file0\x00', 0x1) r0 = socket$pppl2tp(0x18, 0x1, 0x1) socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') futex(0x0, 0x85, 0x0, 0x0, &(0x7f0000000000)=0x1, 0x15000000) lseek(r1, 0x0, 0x2) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="03032abd7000fbdbdf250a00000008000300", @ANYRES32=r3, @ANYBLOB], 0x1c}, 0x1, 0xf0}, 0x8010) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) ioctl$FS_IOC_SETVERSION(r0, 0x40087602, &(0x7f00000001c0)=0x6b7e) r6 = syz_open_dev$sndpcmc(&(0x7f00000002c0), 0x4, 0x20801) ioctl$SNDRV_PCM_IOCTL_READI_FRAMES(r6, 0x80184151, &(0x7f0000000340)={0x0, &(0x7f0000000300)="10c3d61044b300a3aa1541451f7f15c7bf9c8a778da111d1abaeb891", 0x1c}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00', 0x0}) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="00022cbd7000ffdbdf250100000005002a000000000008000600", @ANYRES32=r5, @ANYBLOB="080032000000000008000600", @ANYRES32=r7, @ANYBLOB="08f04f000586196cf6e4956eb6e30a005d00"], 0x3c}, 0x1, 0x0, 0x0, 0x11}, 0x4000000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={0x0, r1}, 0xffffffffffffff9f) connect$pppl2tp(r0, &(0x7f0000000240)=@pppol2tpv3={0x18, 0x1, {0x0, r2, {0x2, 0x4e20, @local}, 0x2, 0x3, 0x3, 0x2}}, 0x2e) sendmmsg(r0, &(0x7f0000004380)=[{{0x0, 0x0, 0x0}}], 0x34000, 0x0) 42.463810719s ago: executing program 1 (id=3235): syz_usb_connect$cdc_ncm(0x4, 0xd1, &(0x7f0000000040)=ANY=[@ANYBLOB="12011003020000182505a1a44000010203010902bf0002010650000900000000020d00000524060001082400a9b30d240f010a0000000300ff000606241a05001407240a050905580c240c00000000a90c0900030424020204240200042406024424"], 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x40000000000012d, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x6, &(0x7f0000000140)=0x1006, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x32, &(0x7f0000001140)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@ipv4={0x800, @udp={{0x6, 0x4, 0x0, 0x0, 0x24, 0x66, 0x0, 0x0, 0x11, 0x0, @empty, @empty, {[@timestamp={0x44, 0x4, 0x8d}]}}, {0x1, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}, 0x0) ioctl$sock_bt_hidp_HIDPCONNADD(0xffffffffffffffff, 0x400448c8, 0x0) syz_usb_connect$printer(0x6, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="1201010200000008f003040040000102030109021b0001010c608709f1000601070103050905010208000002002f35a65558f874d028b60c356df55b763498f6aa79105b80d547f45326e8ca6c6a31ea8987e0bb408f110465631eb0f7ddd204dcd793330104994ff2930bb255db34856fa2297bf2d11450348728230dbadbc7670bea5ca7574ea1d2109e9f0e8d58745e7edfeeba314917bfbd58a0d3fc893892107e94361e5ce4ff9f02"], 0x0) syz_usb_connect(0x3, 0xf5, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000772aed408680070bb96c010203010902e30003dc2000000904003f000e01000505a40600010524007f000d240f0104000000080000000006241a03000a05240101070424020a1524120009a317a88b045e4f01a607c0ffcb7e392a09044c03003a92a2010a240109000102010205240401050c2402"], 0x0) 42.306662185s ago: executing program 1 (id=3238): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r1, &(0x7f00000001c0)={&(0x7f0000000080), 0xc, &(0x7f0000000180)={&(0x7f0000001a00)={0x1608, r2, 0x0, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x8, 0x53}}}}, [@NL80211_ATTR_PEER_MEASUREMENTS={0x15d4, 0x111, 0x0, 0x1, {0x15d0, 0x5, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0x14, 0x2, 0x0, 0x1, [@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}]}]}, {0x384, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_REQ={0xc, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x34, 0x2, 0x0, 0x1, [@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x27}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xd}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xb}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x288, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x44, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x40, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x58f}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x8}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x70, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xe316}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x5}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x14}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0xdc, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xfffa}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x40}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x4}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x7ff}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xf}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1d}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0xec, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1f}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xa}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x1}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x10}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x6}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x19}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xc}]}, @NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x12}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xba}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x8a}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x4}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x24, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x277}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x25}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xf}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x10, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x54, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x5}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x2e}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x40}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x3}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x14a}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x4}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}]}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}]}, {0x100, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0xc, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9d5}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x4}, @NL80211_PMSR_PEER_ATTR_REQ={0x94, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x90, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x8}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x6c}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}]}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x44, 0x2, 0x0, 0x1, [@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x4}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x4}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x2}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x36b}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x14, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}]}]}, {0x46c, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0xc, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x31c, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x11c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x1}]}, @NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1d}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x32}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x100, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x6}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x4b}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x7ff}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x12}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xee}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x6}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0xd0, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x44, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x15}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x12}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x3}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x5}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x4000}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x128, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x84, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x40, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xa4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x8}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x1}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x78, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x19}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}]}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}]}, {0x3b8, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0xa8, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x9c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x4c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x8000}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}]}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_REQ={0x120, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x84, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x4}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x48, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x9}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xc0}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x98, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x4}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x6}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}]}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_REQ={0x8, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_REQ={0xa8, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x88, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x3}]}, @NL80211_PMSR_TYPE_FTM={0x44, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x15}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x13}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}]}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x118, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x40, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xe6}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0xc0, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1b}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xa}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xf}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xe3e}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x8}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x3e}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x682}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}]}, {0x330, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0xa4, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x5c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x1}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x9}]}, @NL80211_PMSR_TYPE_FTM={0x40, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x19}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}]}]}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x14, 0x2, 0x0, 0x1, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x6}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x9}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x24c, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0xe8, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x80}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x4}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x9}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x400}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xc0a7}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x5}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x7}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x68, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}]}, @NL80211_PMSR_TYPE_FTM={0x40, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x17}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0xf8, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x10}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x1a6}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1d}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x3}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x2}]}]}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x8, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_CHAN={0x14, 0x2, 0x0, 0x1, [@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x1}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0xce}]}]}, {0x188, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_REQ={0x110, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x104, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xf1}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x8}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x1ff}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x81}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x2}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x1c, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x2}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x24, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x15e0}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x5}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x398}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x1c, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x26c}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x3b5}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x3}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}]}, {0x444, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0x14, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x31c}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xa}]}, @NL80211_PMSR_PEER_ATTR_REQ={0xf4, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x58, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x4}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1b}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x60, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}]}, @NL80211_PMSR_TYPE_FTM={0x40, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x70}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x19}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x80}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}]}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x2c, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_REQ={0x100, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0xc4, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1a}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xdf}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1a}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xd}]}, @NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xff}]}]}]}, @NL80211_PMSR_PEER_ATTR_REQ={0xa4, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0xa0, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x800}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}]}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x15c, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x158, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xff13}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x10}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1e}]}, @NL80211_PMSR_TYPE_FTM={0x40, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x20}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1f}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x1}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x12}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xb142}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}]}]}]}]}}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x1608}, 0x1, 0x0, 0x0, 0x20000000}, 0x811) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000300)={0x0, 0x0, 0x0, 'queue1\x00', 0x4}) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f00000000c0)={0x372, @time={0x7665642f, 0x6}, 0x0, {}, 0x1, 0x1, 0x70}) 42.089522704s ago: executing program 33 (id=3238): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r1, &(0x7f00000001c0)={&(0x7f0000000080), 0xc, &(0x7f0000000180)={&(0x7f0000001a00)={0x1608, r2, 0x0, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x8, 0x53}}}}, [@NL80211_ATTR_PEER_MEASUREMENTS={0x15d4, 0x111, 0x0, 0x1, {0x15d0, 0x5, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0x14, 0x2, 0x0, 0x1, [@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}]}]}, {0x384, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_REQ={0xc, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x34, 0x2, 0x0, 0x1, [@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x27}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xd}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xb}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x288, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x44, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x40, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x58f}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x8}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x70, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xe316}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x5}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x14}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0xdc, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xfffa}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x40}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x4}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x7ff}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xf}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1d}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0xec, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1f}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xa}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x1}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x10}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x6}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x19}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xc}]}, @NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x12}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xba}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x8a}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x4}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x24, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x277}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x25}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xf}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x10, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x54, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x5}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x2e}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x40}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x3}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x14a}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x4}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}]}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}]}, {0x100, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0xc, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9d5}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x4}, @NL80211_PMSR_PEER_ATTR_REQ={0x94, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x90, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x8}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x6c}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}]}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x44, 0x2, 0x0, 0x1, [@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x4}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x4}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x2}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x36b}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x14, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}]}]}, {0x46c, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0xc, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x31c, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x11c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x1}]}, @NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1d}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x32}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x100, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x6}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x4b}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x7ff}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x12}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xee}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x6}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0xd0, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x44, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x15}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x12}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x3}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x5}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x4000}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x128, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x84, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x40, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xa4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x8}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x1}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x78, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x19}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}]}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}]}, {0x3b8, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0xa8, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x9c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x4c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x8000}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}]}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_REQ={0x120, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x84, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x4}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x48, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x9}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xc0}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x98, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x4}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x6}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}]}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_REQ={0x8, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_REQ={0xa8, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x88, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x3}]}, @NL80211_PMSR_TYPE_FTM={0x44, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x15}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x13}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}]}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x118, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x40, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xe6}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0xc0, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1b}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xa}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xf}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xe3e}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x8}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x3e}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x682}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}]}, {0x330, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0xa4, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x5c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x1}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x9}]}, @NL80211_PMSR_TYPE_FTM={0x40, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x19}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}]}]}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x14, 0x2, 0x0, 0x1, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x6}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x9}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x24c, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0xe8, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x80}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x4}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x9}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x400}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xc0a7}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x5}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x7}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x68, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}]}, @NL80211_PMSR_TYPE_FTM={0x40, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x17}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0xf8, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x10}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x1a6}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1d}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x3}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x2}]}]}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x8, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_CHAN={0x14, 0x2, 0x0, 0x1, [@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x1}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0xce}]}]}, {0x188, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_REQ={0x110, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x104, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xf1}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x8}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x1ff}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x81}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x2}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x1c, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x2}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x24, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x15e0}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x5}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x398}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x1c, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x26c}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x3b5}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x3}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}]}, {0x444, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0x14, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x31c}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xa}]}, @NL80211_PMSR_PEER_ATTR_REQ={0xf4, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x58, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x4}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1b}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x60, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}]}, @NL80211_PMSR_TYPE_FTM={0x40, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x70}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x19}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x80}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}]}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x2c, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_REQ={0x100, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0xc4, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1a}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xdf}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1a}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xd}]}, @NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xff}]}]}]}, @NL80211_PMSR_PEER_ATTR_REQ={0xa4, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0xa0, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x800}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}]}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x15c, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x158, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xff13}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x10}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1e}]}, @NL80211_PMSR_TYPE_FTM={0x40, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x20}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1f}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x1}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x12}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xb142}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}]}]}]}]}}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x1608}, 0x1, 0x0, 0x0, 0x20000000}, 0x811) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000300)={0x0, 0x0, 0x0, 'queue1\x00', 0x4}) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f00000000c0)={0x372, @time={0x7665642f, 0x6}, 0x0, {}, 0x1, 0x1, 0x70}) 16.225070766s ago: executing program 5 (id=3336): openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x101001, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x11, &(0x7f0000001080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, [@call={0x85, 0x0, 0x0, 0x50}, @snprintf={{}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}, {}, {0x85, 0x0, 0x0, 0xa7}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r2}, 0xc) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f00000002c0)={&(0x7f0000000280)=[0x0], 0x1}) r4 = socket$inet(0x2, 0x3, 0x4) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000200)={'wlan0\x00'}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=@newqdisc={0x64, 0x24, 0xf0b, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xd}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x34, 0x2, {{0x7f, 0x372, 0x401, 0x3, 0x3, 0xe}, [@TCA_NETEM_LOSS={0x18, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x14, 0x2, {0x6, 0xb2, 0x3, 0x1}}]}]}}}]}, 0x64}}, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000003c0)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000800)=ANY=[@ANYBLOB="4400000010000305000000000000000000000000076ed762498f7eb687c3efa4902f1981336051f24d5165c200eee783cc0c1ee1956778b95b826ad4cd8825dc307dce105b055ca91679d1d360f4cc0d9feb0ef248486b49f5ef2b6db8f9c0bc51961063e55f71abaf3e8436ca938786ed7eee81795d2cdaffb8a5a79ba300cc249f490d0e1c581e6bf1ba5489292a3342f86fa2e55a379a77c64c39db17bb2f4ca9230508fe9405f29168cef5819e4b13166d71af31299045182c080000000000000060ff48c24b301cd33925b1e8d6f593e4442e768475effcebc6e146af813cb6f60560932762abff57bfe559499e63e8260cdfc315f1b6b0232447c413572a107646c0ad0ad8a862093daeff08492fae42de10dfad016efc16e3fa08b7958798381ec038d430c899a06cf99fa820d558c3c52a6976e0533d608125792c7ee593c71884dbdfe319bbbffddaf863d34de4143fad0294d0ce924c39216df2df9efcb14f51000000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800e00010069703665727370616e00000010000280050016000200000004001200"], 0x44}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r7 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r9, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYRESDEC=r7, @ANYRES8, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) unshare(0x24020400) r10 = socket$pppl2tp(0x18, 0x1, 0x1) r11 = socket$inet_udp(0x2, 0x2, 0x0) connect$pppl2tp(r10, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r11, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) getpeername(r10, 0x0, &(0x7f00000000c0)) 15.153441019s ago: executing program 5 (id=3341): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10c4, 0xea90, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000001f80), 0x2, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(r1, &(0x7f0000001fc0)={0x42, 0x3, 0x0, {0x0, 0x21, 0x0, '/proc/sys/net/ipv4/vs/secure_tcp\x00'}}, 0x42) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000000c0)={0x2c, &(0x7f0000000100)={0x0, 0x0, 0x8, {0x8, 0x0, "392cdaab4a73"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) sendfile(r1, r1, &(0x7f0000000180)=0x7, 0x9) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000000)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x20, 0x1, 0x3, "c282fe"}, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000540)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="20010e"], 0x0}) syz_usb_control_io(r0, 0x0, 0x0) r2 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2003) ioctl$I2C_RDWR(r2, 0x707, &(0x7f0000000440)={&(0x7f0000000200)=[{0xfff, 0x10, 0x0, 0x0}], 0x1}) r3 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4d8, 0xdd, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x5, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x0, 0x0, 0x7}}}}}]}}]}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r4 = getpid() syz_pidfd_open(r4, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f00000002c0)) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='blkio.bfq.sectors_recursive\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r5, 0xc0189436, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x2, 0x3}) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000540)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@nfs_export_on}]}) chdir(&(0x7f00000003c0)='./bus\x00') r6 = creat(&(0x7f0000000440)='./file0\x00', 0x0) open_by_handle_at(r6, &(0x7f0000000140)=@OVL_FILEID_V1={0x18, 0x300f8, {'\x00', {0x0, 0xfb, 0x15, 0x3, 0x1, "e837282efe0868327a31a705ec978547"}}}, 0xd71640) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x2, 0x2171, 0xffffffffffffffff, 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, &(0x7f00000005c0)={0x14, &(0x7f0000000440)={0x20, 0x21, 0xfd, {0xfd, 0x30, "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"}}, &(0x7f0000000580)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x410}}}, &(0x7f0000000800)={0x44, &(0x7f0000000600)={0x0, 0x5, 0xc, "f77b22bc86b8598a1dbb4807"}, &(0x7f0000000640)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000000680)={0x0, 0x8, 0x1, 0x26}, &(0x7f00000006c0)={0x20, 0x81, 0x3, "bd7375"}, &(0x7f0000000700)={0x20, 0x82, 0x1, "8a"}, &(0x7f0000000280)={0x20, 0x83, 0x1, '['}, &(0x7f0000000780)={0x20, 0x84, 0x4, "5f0bb4c2"}, &(0x7f00000007c0)={0x20, 0x85, 0x3, "d592c9"}}) syz_usb_control_io(r3, &(0x7f00000003c0)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="000008000000080482"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write(r3, 0x81, 0x2, &(0x7f00000001c0)="4085") 11.612949334s ago: executing program 5 (id=3359): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x4008000}, 0x4000000) r2 = syz_open_dev$vim2m(&(0x7f0000000180), 0x3, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r2, 0xc0405602, 0x0) socket(0x1d, 0x2, 0x6) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='net/wireless\x00') madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) read$FUSE(0xffffffffffffffff, &(0x7f0000000c80)={0x2020}, 0x2020) ioctl$VHOST_SET_OWNER(0xffffffffffffffff, 0xaf01, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)=@newtaction={0x70, 0x30, 0x800, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_skbedit={0x58, 0x7, 0x0, 0x0, {{0xc}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PRIORITY={0xffd3}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x4}, @TCA_SKBEDIT_PARMS={0x18}]}, {0x4}, {0xc, 0xa}, {0xc, 0x9, {0x60}}}}]}]}, 0x70}}, 0x0) r4 = socket$inet(0x2, 0xa, 0x0) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @private=0xa010104}, 0x10) sendmmsg$inet(r4, &(0x7f0000000c40)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000dc0)}], 0x1}}], 0x1, 0xc0) r5 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp\x00') pread64(r5, &(0x7f00000000c0)=""/105, 0x69, 0xfff) ioctl$HIDIOCGDEVINFO(r0, 0x801c4803, &(0x7f00000000c0)=""/43) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af20, 0x0) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af20, 0x0) eventfd2(0x0, 0x0) io_setup(0x974, &(0x7f0000000040)) 10.606468283s ago: executing program 5 (id=3362): bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[], 0x50) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x50, 0xffffffffffffffff, 0x0) socket(0x23, 0x6, 0x1000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f0000004900)=[{{&(0x7f0000001040)=@nfc, 0x80, &(0x7f00000015c0)=[{&(0x7f0000002900)=""/204, 0xcc}, {&(0x7f00000011c0)=""/135, 0x87}, {&(0x7f0000001280)=""/251, 0xfb}, {&(0x7f0000001380)=""/82, 0x52}, {&(0x7f0000001400)=""/216, 0xd8}, {&(0x7f0000001500)=""/13, 0xd}, {&(0x7f0000001540)=""/112, 0x70}], 0x7}, 0x49e5}, {{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000700)=""/209, 0xd1}, {&(0x7f0000000800)=""/136, 0x88}, {&(0x7f00000008c0)=""/162, 0xa2}, {&(0x7f0000000980)=""/155, 0x9b}, {&(0x7f0000000a40)=""/29, 0x1d}, {&(0x7f0000000a80)=""/84, 0x54}, {&(0x7f0000000b00)=""/68, 0x44}, {&(0x7f0000000b80)=""/136, 0x88}, {&(0x7f0000000c40)=""/50, 0x32}, {&(0x7f0000002a00)=""/4096, 0x1000}], 0xa, &(0x7f0000000d40)=""/121, 0x79}, 0x100}, {{0x0, 0x0, &(0x7f0000000f00)=[{&(0x7f0000000dc0)=""/239, 0xef}, {&(0x7f0000000ec0)=""/25, 0x19}], 0x2, &(0x7f0000000f40)=""/220, 0xdc}, 0x904}, {{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000100)=""/150, 0x96}, {&(0x7f00000003c0)=""/165, 0xa5}, {&(0x7f00000001c0)=""/33, 0x21}, {&(0x7f0000000480)=""/206, 0xce}, {&(0x7f0000000200)=""/25, 0x19}, {&(0x7f00000010c0)=""/169, 0xa9}], 0x6, &(0x7f00000006c0)=""/30, 0x1e}, 0x2}, {{&(0x7f0000001d80)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, &(0x7f0000001f00)=[{&(0x7f0000001e00)=""/143, 0x8f}, {&(0x7f0000001ec0)=""/17, 0x11}], 0x2, &(0x7f0000001f40)=""/144, 0x90}, 0x80000001}, {{&(0x7f0000002000)=@qipcrtr, 0x80, &(0x7f0000002600)=[{&(0x7f0000002080)=""/194, 0xc2}, {&(0x7f0000002180)=""/115, 0x73}, {&(0x7f0000002200)=""/209, 0xd1}, {&(0x7f0000002300)=""/193, 0xc1}, {&(0x7f0000002400)=""/216, 0xd8}, {&(0x7f0000002500)=""/253, 0xfd}], 0x6, &(0x7f0000002680)=""/146, 0x92}, 0x9}, {{&(0x7f0000001640)=@phonet, 0x80, &(0x7f0000001c80)=[{&(0x7f00000016c0)=""/103, 0x67}, {&(0x7f0000001740)=""/137, 0x89}, {&(0x7f0000001800)=""/126, 0x7e}, {&(0x7f0000001880)=""/154, 0x9a}, {&(0x7f0000001940)=""/139, 0x8b}, {&(0x7f0000001a00)=""/239, 0xef}, {&(0x7f0000001b00)=""/146, 0x92}, {&(0x7f0000001bc0)=""/171, 0xab}], 0x8, &(0x7f0000001d00)=""/123, 0x7b}, 0x6}, {{0x0, 0x0, &(0x7f0000001180)=[{&(0x7f0000000c80)=""/166, 0xa6}], 0x1, &(0x7f0000003a00)=""/110, 0x6e}, 0x3}, {{&(0x7f0000003a80)=@un=@abs, 0x80, &(0x7f0000003c40)=[{&(0x7f0000003b00)=""/183, 0xb7}, {&(0x7f0000003bc0)=""/125, 0x7d}], 0x2, &(0x7f0000002740)=""/31, 0x1f}, 0x9}, {{&(0x7f0000003cc0)=@xdp, 0x80, &(0x7f0000003f40)=[{&(0x7f0000003d40)=""/95, 0x5f}, {&(0x7f0000003dc0)=""/106, 0x6a}, {&(0x7f0000003e40)=""/81, 0x51}, {&(0x7f0000003ec0)=""/122, 0x7a}], 0x4, &(0x7f0000003f80)=""/77, 0x4d}, 0x7}, {{&(0x7f0000004000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, 0x80, &(0x7f0000004200)=[{&(0x7f0000004080)=""/84, 0x54}, {&(0x7f0000004100)=""/249, 0xf9}], 0x2, &(0x7f0000004240)=""/20, 0x14}, 0xc8a3}, {{0x0, 0x0, &(0x7f0000004780)=[{&(0x7f0000004280)=""/240, 0xf0}, {&(0x7f0000004380)=""/13, 0xd}, {&(0x7f00000043c0)=""/191, 0xbf}, {&(0x7f0000004480)=""/20, 0x14}, {&(0x7f00000044c0)=""/205, 0xcd}, {&(0x7f00000045c0)=""/184, 0xb8}, {&(0x7f0000004680)=""/210, 0xd2}], 0x7, &(0x7f0000004800)=""/209, 0xd1}, 0x9}], 0xc, 0x2, 0x0) r2 = getpgrp(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x0, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, 0x0) sched_setattr(r2, &(0x7f00000002c0)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x2000000006, 0x100000001, 0x0, 0xfa11, 0x65aa}, 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) syz_io_uring_setup(0x40004951, &(0x7f0000000300)={0x0, 0xe3d6, 0x2, 0x4, 0x141}, 0x0, &(0x7f0000000380)) r3 = getpid() r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000100)={0x0, 0x3, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a31000000001400078005001500070000000800124000000000050005000200000005000400000000000d000300686173683a6e6574"], 0x5c}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000002780)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a310000000005000100070000001c0007800c00018008000140ffffffff0c000280080001407f0000013d11b664875f77e236a646897f722ad3854bada05b994f288da573ac5a0883484ae7f2f482ffabd64047d1565887e3c08949"], 0x44}, 0x1, 0x0, 0x0, 0x30040043}, 0x240008c4) sendmsg$IPSET_CMD_DESTROY(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB="740000000306010800000000000000000600000705000100070000000500010007000000050001000700000005000100070000000900020073797a3000000000050001000700000005000100070000000900020073797a30000000000900020073797a30000000000900020073797a31"], 0x74}, 0x1, 0x0, 0x0, 0x80c1}, 0x50) syz_pidfd_open(r3, 0x0) landlock_create_ruleset(0x0, 0x0, 0x0) umount2(&(0x7f0000000040)='.\x00', 0x2) pipe2$watch_queue(0x0, 0x80) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_procs(r6, &(0x7f0000000040)='tasks\x00', 0x2, 0x0) sendfile(r7, r7, 0x0, 0xc) openat$cgroup_procs(r6, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) 9.287202571s ago: executing program 3 (id=3372): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="bdff000004000000080294e87500000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000008000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r2}, 0x18) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000140)={0x28, 0x0, 0x0, @host}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="18d192bfdf2101000e00000000000000000000000085000000", @ANYRES16=r1, @ANYRESDEC=r1], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f00000003c0)='sched_switch\x00', r1, 0x0, 0xfffffffffffffff8}, 0x18) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00') getdents64(r5, &(0x7f0000000080)=""/36, 0x24) socket$inet_tcp(0x2, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000002c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x707cb000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs={0x1, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='environ\x00') pipe2$watch_queue(0x0, 0x80) setrlimit(0x7, &(0x7f0000000400)) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, r8, 0xffffffffffffffef) preadv(r8, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0xc002a0, 0x0) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x30, &(0x7f0000000180)=""/214, 0x0) setrlimit(0x6, 0x0) 8.312829132s ago: executing program 0 (id=3374): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000000000), 0x651, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f00000002c0)={0x0, 'pim6reg\x00', {}, 0x400}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) r2 = creat(&(0x7f0000000440)='./file0/file0\x00', 0x188) quotactl_fd$Q_QUOTAON(r2, 0xffffffff80000200, 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r2, 0xc0406618, &(0x7f0000000300)={@desc={0x1, 0x0, @auto="dceefc0b9aa0f5a6"}}) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000240)={r1, 0x2, 0x2, 0x4}) ioctl$UDMABUF_CREATE(r2, 0x40187542, &(0x7f0000000280)={r3, 0x0, 0x1000000010000, 0x1000000}) setsockopt$CAN_RAW_FD_FRAMES(0xffffffffffffffff, 0x65, 0x5, &(0x7f0000000200), 0x4) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000c40)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x38, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x1}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x60}}, 0x4040004) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x38, 0x140e, 0x2, 0x70bd27, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @RDMA_NLDEV_ATTR_RES_PDN={0x8, 0x3c, 0x9}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000010}, 0x80) 8.087904574s ago: executing program 0 (id=3376): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000001240)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x0, 0x0, 0x14}, @ipv4=@udp={{0x6, 0x4, 0x3, 0x1b, 0x65, 0x66, 0x0, 0x40, 0x11, 0x0, @rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0x3a}, {[@timestamp={0x44, 0x4, 0x1e, 0x0, 0x6}]}}, {0x4e20, 0x4e21, 0x18, 0x0, @wg=@data={0x4, 0x202, 0x4, "e8771ac366586e56f446dcd22ec94c672f1cd650516a2fbeddd0cb5cffc4ef63a1c2be9551171e48bb8559ac9077c099289048d76d"}}}}, 0x73) syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaaaa08004500006000000000002f9078640101000000000024806558000000000000000010000800000086dd"], 0x0) r2 = socket$kcm(0x10, 0x2, 0x10) r3 = eventfd2(0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c000000120005f700000000004a000000000000", @ANYRES32=0x0, @ANYBLOB="1100000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32], 0x3c}}, 0x0) readv(r3, &(0x7f0000000500)=[{&(0x7f0000000380)=""/95, 0x5f}], 0x1) write$eventfd(r3, &(0x7f0000000280)=0x9, 0x8) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd000280080003"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@bridge_newvlan={0x24, 0x70, 0x1, 0x800000, 0x0, {}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x2, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_MCAST_ROUTER={0x5, 0x6, 0x9}}]}, 0x24}, 0x1, 0x0, 0x0, 0x881}, 0x400c014) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) 7.142825891s ago: executing program 0 (id=3379): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) socket$kcm(0x2, 0xa, 0x2) write$tun(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="7000002cffffffffffffaaaaaaaaaabb884700000000000000000000000000000f00000001006dbc3a6202b021e500000000000000000000000000000001fc0200000000000000000000000000000c02040101000400fe8000000000000000000000000000352c0e04074920a477ff01000000000000000000000000000100000000000000000000ffffac1e0101fe8000000000000000000000000000aa00000000000000000000000000000001ff020000000000000000000000000001fe8000000000000000000000000000aa2001000000000000000000000000000000000400091801000c2100000000000004010b072800000000086940000900000000000000050000000000000007000000000000000200000000000000c91000000000000000000000ffffffffffff074800000000100302000100000000000000070000000000000004000000000000000400000000000000317d0000000000000700000000000000030000000000000094000000000000009783df6f3e01665d70f8cf1a6604fe1f8df2ddc955b25657518fb665c281d6c5ef06daf61f16e7d6bedb589ac1479c6e8f9b6e5aecc71e97062318358a9ba1d983eaafa496aa9cb5e72fd573a19d97407ea7ad238675ced3107a5d6e836366c1a20557718fe46816f597d5cc0eab8dfd39d2db3b0218af8861dd310e790c60c41e9e89c44c0000160000000000000005020007000000001d09000000000000c2040000000e0718000000030409000002009f9f000000000000000000000000050200000720f854e4da060a0100000000000000000010000000000000000400000000000000000100000100000000004e224e220481907814fb4a2301b1b37887551fe837d1bf4300e0b7990606bc3015fbaf83c0938421aa413e0d1966e560cd9ee74cf4096cbbdde0426c323670c8d3fcbf7b8e55238dcee479edd93677e50846d5043e9d93f4b9af13e83122db10199ea9284e82ff71a53fa47dc66933e7abb14db8edb34f53757494a485398b1b5a33bdf8f345e600d2cfeeb6c4c22c7260144263ed0d03f7"], 0x2fe) 7.065986303s ago: executing program 3 (id=3380): sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x89a0, 0x0) syz_open_procfs(0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x20000000) connect$pppoe(r1, &(0x7f0000000400)={0x18, 0x0, {0x2, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, 'lo\x00'}}, 0x1e) r3 = socket$pppoe(0x18, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syncfs(0xffffffffffffffff) connect$pppoe(r3, 0x0, 0x0) ioctl$PPPIOCGCHAN(r3, 0x80047437, &(0x7f0000000080)) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$PPPIOCATTCHAN(r4, 0x40047438, &(0x7f0000000040)=0x2) ioctl$PPPIOCBRIDGECHAN(r4, 0x40047435, 0x0) ioctl$int_out(r4, 0x40047438, &(0x7f0000000000)) timer_create(0x0, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) r5 = eventfd(0x0) read$eventfd(r5, 0x0, 0x0) writev(r5, &(0x7f0000000080)=[{0x0}], 0x1) 7.01373096s ago: executing program 3 (id=3381): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x5) syz_emit_ethernet(0x6a, &(0x7f0000000340)=ANY=[@ANYBLOB="a5050f0014b500000090000008004504005c0000000000019078ac1e0001ac1414aa05009078e00000e04000000000000000008900001b6e1f54a6a314aaac1414aa442c00030000000000000000e000000100000000ac1e000100000000ac0e14bb00"/110], 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) unshare(0x6020400) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x0, &(0x7f00000000c0)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r1, 0xffffe000) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) arch_prctl$ARCH_FORCE_TAGGED_SVA(0x4004) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x5) bind$bt_l2cap(0xffffffffffffffff, &(0x7f00000002c0)={0x1f, 0x0, @any, 0xfffa}, 0xe) openat$rtc(0xffffffffffffff9c, &(0x7f00000012c0), 0x48001, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x3, @vbi={0x0, 0x0, 0xe59, 0x59565955, [0xfffffffe, 0xe], [0x8005, 0x7fc9ee64], 0x1}}) prlimit64(0x0, 0x0, &(0x7f0000000400)={0x8, 0x87}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0xfffffffffffffcfe, &(0x7f00000000c0)=0x2) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYRES32=r6, @ANYRESHEX=r1, @ANYRES8], 0x258}, 0x1, 0x0, 0x0, 0x4000894}, 0x400c880) socket$unix(0x1, 0x1, 0x0) 6.803755144s ago: executing program 0 (id=3382): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) connect$unix(r1, &(0x7f00000004c0)=@abs={0x1, 0x0, 0x4e20}, 0x6e) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = socket$inet(0x2, 0x3, 0x9) pipe2$watch_queue(&(0x7f0000000480), 0x80) shutdown(r2, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000440), 0x0, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r3 = fsopen(&(0x7f00000000c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r3, 0x6, 0x0, 0x0, 0x0) r4 = syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r4, 0xc018643a, &(0x7f0000000140)={0x4000000}) ioctl$DRM_IOCTL_WAIT_VBLANK(r4, 0xc018643a, &(0x7f0000000000)={0x4000000, 0xd, 0x1}) pread64(r4, &(0x7f0000000180)=""/244, 0x20, 0x100000000) r5 = fsmount(r3, 0x0, 0xf0) socket$inet6_tcp(0xa, 0x1, 0x0) r6 = openat$cgroup_subtree(r5, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r6, &(0x7f0000000040)={[{0x2b, 'cpuset'}]}, 0x8) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_clone(0x8a140600, &(0x7f00000001c0)="07b5e42d30226aba87697ce3ff665d7cb4bdf0381b74230609ad5a0c5b8a9d5c2f3277994317083b76b0aedef0afef4267cf265f61c257cdf6b2b4f80e41dc603103f166f30d40ea85dfe1e8e66067ed6f2943db878e74532cf26a3f8ca5", 0x5e, &(0x7f0000000240), &(0x7f0000000340), &(0x7f0000000380)="646a21c1314836dab1375dc5370b85967842427f74c7fdda0fb7ef9233f6099289037fa8ede14a0147999b5b523275ef4abe7ff27941f54759b8ecf4d9f02b8e7d4d9dfadc80893ce8f09ba0bcc31b1ba7191c0c1c71e4bb4b162e670308b4d33e0f02aa5e24636f9c2d0db8a006018c1225f05d35d6e969f5fabf0a8c6ba2ea8675fa596d5d008285bc2bc52fea5fdafb52bfa310ecb3056c7f32881c0305e3ea74da8d") sendmsg$nl_xfrm(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001100)={&(0x7f0000000540)=@newsa={0x1ac, 0x10, 0x1, 0x0, 0x0, {{@in6=@private1, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x64}, {@in6=@local, 0x4d6}, @in6=@ipv4={'\x00', '\xff\xff', @multicast1}, {0x0, 0x100, 0x2, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0xe3}, {0xfffffffffffffffd, 0x4, 0x8000000, 0x100000000}, {0x0, 0x0, 0x2}, 0x0, 0x0, 0xa, 0x0, 0x0, 0x4d}, [@algo_crypt={0x48, 0x2, {{'cbc(aes)\x00'}}}, @replay_esn_val={0x28, 0x17, {0x3, 0x70bd27, 0x0, 0x70bd28, 0x70bd28, 0x0, [0x4, 0x3, 0x3ff]}}, @algo_auth_trunc={0x4c, 0x14, {{'sha384-avx\x00'}}}]}, 0x1ac}}, 0x0) syz_open_dev$dmmidi(&(0x7f0000000300), 0x6, 0x70202) socket$nl_route(0x10, 0x3, 0x0) openat$audio(0xffffffffffffff9c, 0x0, 0x80802, 0x0) 5.885816489s ago: executing program 3 (id=3384): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000005c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(0xffffffffffffffff, 0xc040564a, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x3, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='br_fdb_add\x00', r4}, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'bridge0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="280000001c000100000000000000000007000000", @ANYRES32=r7, @ANYBLOB="4000aa000a0002"], 0x28}}, 0x0) 3.601793127s ago: executing program 2 (id=3391): sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x89a0, 0x0) syz_open_procfs(0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x20000000) connect$pppoe(r1, &(0x7f0000000400)={0x18, 0x0, {0x2, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, 'lo\x00'}}, 0x1e) r3 = socket$pppoe(0x18, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syncfs(0xffffffffffffffff) connect$pppoe(r3, 0x0, 0x0) ioctl$PPPIOCGCHAN(r3, 0x80047437, &(0x7f0000000080)) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$PPPIOCATTCHAN(r4, 0x40047438, &(0x7f0000000040)=0x2) ioctl$PPPIOCBRIDGECHAN(r4, 0x40047435, 0x0) ioctl$int_out(r4, 0x4004743d, &(0x7f0000000000)) timer_create(0x0, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) r5 = eventfd(0x0) read$eventfd(r5, 0x0, 0x0) writev(r5, &(0x7f0000000080)=[{0x0}], 0x1) 3.40939567s ago: executing program 2 (id=3393): r0 = openat$rtc(0xffffffffffffff9c, &(0x7f00000012c0), 0x8000, 0x0) ioctl(r0, 0xffffffff, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x24000, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0x0, r1, 0x4, 0x200, 0x8, 0x4dcf}) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r1, 0x4068aea3, &(0x7f0000000080)) socket$phonet(0x23, 0x2, 0x1) fsmount(0xffffffffffffffff, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_GUEST_MEMFD(r3, 0xc040aed4, &(0x7f00000001c0)={0x1000200001ee0000, 0x3}) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r5, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r6 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r6, 0x400448c8, &(0x7f0000000600)={r5, r5, 0x8, 0xfffffffffffffd32, 0x0, 0x5, 0xb1, 0x10cf, 0x5, 0x5, 0x7ffffffe, 0x1, 'syz0\x00'}) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, r4, 0x0) syz_emit_ethernet(0x2e, &(0x7f0000000340)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @random="fad1e048716e", @void, {@ipv4={0x800, @udp={{0x6, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x2, 0x11, 0x0, @empty, @empty, {[@ra={0x94, 0x4, 0x1}]}}, {0x0, 0x4e20, 0x8}}}}}, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) r7 = socket(0x1d, 0x2, 0x6) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r7, 0x6a, 0x2, 0x0, &(0x7f00000000c0)=0xfffffffffffffd27) close(0x3) 3.185694224s ago: executing program 0 (id=3395): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='net/igmp\x00') preadv(r1, &(0x7f0000003380)=[{&(0x7f00000020c0)=""/168, 0xa8}], 0x1, 0xffffffc0, 0x10000) (async) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000400)={0x0, @sliced={0x8e, [0x8, 0x5, 0x4, 0xfffe, 0x6, 0x3, 0x3, 0x1, 0x5, 0x6, 0x9, 0x27aa, 0x3ff, 0x8, 0x1, 0x1, 0x4, 0x6, 0xfff, 0x3, 0x5, 0xff97, 0x11, 0xc1, 0x8, 0x605, 0x9, 0xe, 0x1, 0x1, 0xd77, 0x1, 0x91a8, 0x100, 0xb7e, 0xe72d, 0x9, 0x9, 0x7, 0xfff1, 0xf, 0x10, 0x0, 0xf975, 0x6, 0x200, 0x7, 0x8], 0xbdc700}}) symlink(0x0, &(0x7f0000000100)='./file0\x00') mkdirat(r1, &(0x7f0000000340)='./file2\x00', 0x5a) (async) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000200)=0x1000000000005) (async) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) (async) sched_setscheduler(0x0, 0x3, &(0x7f0000000300)=0x80000000) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x3) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r4 = syz_clone(0x4008000, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) (async) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) (async) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) r7 = dup(r6) write$UHID_INPUT(r7, &(0x7f0000004000)={0xf, {"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", 0xfffffffffffffe59}}, 0xfa) (async) r8 = syz_io_uring_setup(0x10d, &(0x7f0000000380)={0x0, 0x25b7, 0x100, 0x3, 0x2fb}, &(0x7f0000000040)=0x0, &(0x7f0000000500)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r11 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x118, &(0x7f0000000280)=0x4, 0x0, 0x4) (async) setsockopt$inet_MCAST_JOIN_GROUP(r11, 0x0, 0x2a, &(0x7f0000000000)={0x3, {{0x2, 0x0, @multicast2}}}, 0x88) (async) setsockopt$inet_MCAST_JOIN_GROUP(r11, 0x0, 0x2a, &(0x7f0000001040)={0x3, {{0x2, 0x0, @multicast1}}}, 0x88) (async) syz_io_uring_submit(r9, r10, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0x40, 0x0, r0, 0x80, &(0x7f00000000c0)=@un=@abs={0x0, 0x0, 0x4e21}}) (async) io_uring_enter(r8, 0x3516, 0x483, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 3.001407437s ago: executing program 2 (id=3396): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_DELETE(r0, 0x0, 0x4) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async, rerun: 64) r1 = socket(0x80000000000000a, 0x2, 0x0) (rerun: 64) socket$inet6(0xa, 0x1, 0x8010000000000084) (async, rerun: 64) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 64) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) (async, rerun: 32) recvmmsg(r1, &(0x7f00000000c0), 0x0, 0x2, 0x0) (async, rerun: 32) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r4, 0x84, 0x6, 0x0, &(0x7f00000000c0)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) syz_emit_ethernet(0x52, &(0x7f0000000300)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000008004500004400000000002190337bf58400ffffffff050090780a0101026a0000000000000000000000ac1e0001ac14140107be00e0000002000000"], 0x0) (async, rerun: 64) openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0xa0201, 0x0) (async, rerun: 64) socket$inet6_sctp(0xa, 0x1, 0x84) (async, rerun: 32) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async, rerun: 32) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000040)={0x40001, 0x5, 0x5, 0x80000004, 0x7, "9393858308cadc3fe5df0af03652b354deb58c", 0x1e, 0x103}) (async) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400010bce) (async, rerun: 32) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) (rerun: 32) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) (async, rerun: 64) r6 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x16ba02, 0x91) (rerun: 64) write$selinux_load(r6, 0x0, 0x10c) (async) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r6, 0x0, 0x6000050) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) setrlimit(0x3, &(0x7f0000000180)={0x6, 0x617}) (async) r7 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000240)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r7, 0x40946400, 0x0) (async, rerun: 32) ioctl$COMEDI_DEVCONFIG(r7, 0x40946400, &(0x7f00000003c0)={'pcl816\x00', [0x40, 0x7f, 0x3e, 0x3, 0x1, 0xdeae, 0x3b, 0x2, 0xa, 0xfd, 0xfffffffa, 0xffffffff, 0x401, 0x1, 0x6, 0x101, 0xf7fffffe, 0x7f, 0x3, 0x3ffffffe, 0x8c, 0xca9f, 0x0, 0x4, 0xb, 0xc3, 0x3, 0x4, 0x81, 0x0, 0xc6]}) (rerun: 32) 2.584784866s ago: executing program 0 (id=3397): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000100)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) ioctl$UFFDIO_CONTINUE(r0, 0x8010aa01, &(0x7f0000000000)={{&(0x7f0000600000/0x3000)=nil, 0x3000}}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x63b7, &(0x7f0000006680)) unshare(0x4040600) syz_usb_connect(0x0, 0x3f, &(0x7f0000000140)=ANY=[@ANYBLOB="120100004366b408c70b0800c84f0102030109022d00010000000009040000032eb47d000905f9ffffff00000009050f47"], 0x0) 2.559731987s ago: executing program 2 (id=3398): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan0\x00', 0x0}) dup(0xffffffffffffffff) dup(0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_io_uring_setup(0x988, &(0x7f0000000280)={0x0, 0x9bee, 0x8, 0xfffffffd, 0x25d}, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f0000000000)=@IORING_OP_STATX={0x15, 0x4, 0x0, 0xffffffffffffff9c, 0x0, 0x0, 0x2, 0x4000, 0x1}) io_uring_enter(r5, 0x52dc, 0xf62e, 0x3, 0x0, 0xffffffffffffffc0) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010002000000fcdbdf258200000008000300", @ANYRES32=r2, @ANYBLOB="a62214c2548730"], 0x1c}, 0x1, 0x0, 0x0, 0x400c000}, 0x401c404) 2.414003998s ago: executing program 6 (id=3399): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CHECK_EXTENSION_VM(r1, 0xae03, 0x51) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r2 = inotify_init1(0x80000) inotify_add_watch(r2, &(0x7f0000000240)='.\x00', 0x60000726) chdir(&(0x7f0000000140)='./bus\x00') mknod$loop(&(0x7f0000000140)='./file0\x00', 0x8fff, 0x0) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) 2.02122568s ago: executing program 6 (id=3400): socket$inet6_mptcp(0xa, 0x1, 0x106) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) (async) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, @none, 0x0, 0x1}, 0xe) getsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, 0x0, &(0x7f0000000180)) (async, rerun: 64) r2 = dup(r0) (rerun: 64) ioctl$TIOCL_SETSEL(r2, 0x541c, &(0x7f0000001900)={0x2, {0x2, 0xa00, 0x0, 0x101, 0x300}}) (async) setsockopt$inet6_int(r2, 0x29, 0x0, 0x0, 0x0) 1.902407511s ago: executing program 3 (id=3401): r0 = syz_open_procfs(0x0, &(0x7f0000000400)='ns\x00') r1 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r2 = socket$qrtr(0x2a, 0x2, 0x0) r3 = syz_io_uring_setup(0x497, &(0x7f0000000540)={0x0, 0x4660, 0x400, 0x7, 0x285}, &(0x7f0000000000)=0x0, &(0x7f0000000480)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r2, 0x0, 0x0}) io_uring_enter(r3, 0x3498, 0x969, 0x0, 0x0, 0x900) r6 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000340)=0x5) socketpair$unix(0x1, 0x3, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r7 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r7}, &(0x7f0000bbdffc)=0x0) timer_settime(r8, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r9 = socket$can_j1939(0x1d, 0x2, 0x7) readv(r9, &(0x7f0000000140)=[{&(0x7f0000000440)=""/4106, 0x100a}], 0x1) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2) ioctl$KVM_SET_CLOCK(r6, 0x4030ae7b, &(0x7f0000000000)={0x7, 0x8, 0x12, 0x29, 0x13b}) readlinkat(r0, &(0x7f0000000100)='./mnt\x00', &(0x7f0000000440)=""/163, 0xa3) 1.71379733s ago: executing program 6 (id=3402): r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x2c8, 0x0, 0x12, 0x308, 0x128, 0x206, 0x1f8, 0x2e8, 0x2e8, 0x1f8, 0x2e8, 0x4, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth1_to_bond\x00', 'caif0\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@unspec=@connlabel={{0x28}}, @common=@srh={{0x30}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xff3f, 0x7f00}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@rand_addr=' \x01\x00', @remote, [], [], 'geneve0\x00', 'gretap0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE3={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x328) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) getrlimit(0xe, &(0x7f0000000340)) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="028000"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000400000000040004000000000000a24b000000000000000000"], 0x50) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x8, &(0x7f00000001c0)=ANY=[@ANYBLOB="18020000010000000000000000000000850000008700000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000000000009850000008600000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x5c93067603d2de2a, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200000d4}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(0xffffffffffffffff, 0xc02c564a, 0x0) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0xffffffffffffff61) sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$nl_route(0x10, 0x3, 0x0) flock(r4, 0x1) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r5, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x1, &(0x7f0000000340)=@gcm_256={{0x303}, '\x00', "ec094e071cc80f218d360356a936a7e3971a8c35c47e580400", "cf00", "fffffffffffffffd"}, 0x38) setsockopt$inet6_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f0000000200)=0xffffffffffffffff, 0x4) writev(r5, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1) r6 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r6, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000a, 0x4031, 0xffffffffffffffff, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r6}, 0x8) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xe, 0x0, &(0x7f0000000100)="c274386d178550cb864bd57221bc", 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.357884088s ago: executing program 6 (id=3403): socket$inet6(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_GUEST_MEMFD(r3, 0xc040aed4, &(0x7f0000000080)={0x200001fe0000, 0x3}) ioctl$KVM_SET_USER_MEMORY_REGION2(r3, 0x40a0ae49, &(0x7f0000000180)={0x4, 0x4, 0x6000, 0xa7000, &(0x7f0000ffc000/0x2000)=nil, 0x0, r4}) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_PRE_FAULT_MEMORY(r5, 0xc040aed5, &(0x7f0000000040)={0xb000, 0x3c000}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000280)={'wg2\x00'}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r7, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000008c0)=ANY=[@ANYBLOB="28010000", @ANYRES16=r8, @ANYBLOB="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"], 0x128}, 0x1, 0x0, 0x0, 0x4004040}, 0x40884) r9 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r9, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r9, 0x1, 0x8, &(0x7f0000000000), 0x4) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0xb, 0x5, 0x2, 0x2, 0x5}, 0x50) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r10}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r11}, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r9) ioctl$sock_SIOCETHTOOL(r9, 0x8946, &(0x7f00000000c0)={'syz_tun\x00', &(0x7f0000000040)=@ethtool_link_settings={0x2, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x20, 0x8, [0x0, 0x0, 0x0, 0x100, 0x5, 0x0, 0x0, 0x2]}}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f0000002780)=[{{&(0x7f00000000c0)=@generic, 0x80, &(0x7f0000000700)=[{&(0x7f00000002c0)=""/197, 0xc5}, {&(0x7f00000003c0)=""/174, 0xae}, {&(0x7f0000000480)=""/195, 0xc3}, {&(0x7f0000000580)=""/73, 0x49}, {&(0x7f0000000600)=""/237, 0xed}], 0x5, &(0x7f0000000780)=""/189, 0xbd}, 0xa}, {{&(0x7f0000000840)=@pptp={0x18, 0x2, {0x0, @dev}}, 0x80, &(0x7f0000000140)=[{&(0x7f00000008c0)=""/223, 0xdf}, {&(0x7f00000009c0)=""/81, 0x51}, {&(0x7f0000000a40)=""/150, 0x96}], 0x3, &(0x7f0000000b00)=""/143, 0x8f}, 0x8}, {{&(0x7f0000000bc0)=@l2={0x1f, 0x0, @none}, 0x80, &(0x7f0000000c80)=[{&(0x7f0000000c40)=""/60, 0x3c}], 0x1, &(0x7f0000000cc0)=""/113, 0x71}, 0x9}, {{&(0x7f0000000d40)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}, 0x80, &(0x7f0000001ec0)=[{&(0x7f0000000dc0)=""/225, 0xe1}, {&(0x7f0000000ec0)=""/4096, 0x1000}], 0x2, &(0x7f0000001f00)=""/230, 0xe6}, 0x3}, {{&(0x7f0000002000)=@caif=@dgm, 0x80, &(0x7f0000002640)=[{&(0x7f0000002080)=""/249, 0xf9}, {&(0x7f0000002180)=""/12, 0xc}, {&(0x7f00000021c0)=""/107, 0x6b}, {&(0x7f0000002240)=""/238, 0xee}, {&(0x7f0000002340)=""/112, 0x70}, {&(0x7f00000023c0)=""/101, 0x65}, {&(0x7f0000002440)=""/225, 0xe1}, {&(0x7f0000002540)=""/12, 0xc}, {&(0x7f0000002580)=""/33, 0x21}, {&(0x7f00000025c0)=""/119, 0x77}], 0xa, &(0x7f0000002700)=""/119, 0x77}, 0x4}], 0x5, 0x10000, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$rxrpc(0x21, 0x2, 0xa) r12 = socket$unix(0x1, 0x2, 0x0) bind$unix(r12, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) socket$nl_generic(0x10, 0x3, 0x10) 1.145498914s ago: executing program 2 (id=3404): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x2fe) 1.037614976s ago: executing program 5 (id=3405): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = accept$unix(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x9, &(0x7f0000000280)=""/83, &(0x7f0000000300)=0x53) bind$unix(r1, 0x0, 0x0) socket$igmp(0x2, 0x3, 0x2) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_int(r2, 0x0, 0x33, &(0x7f0000000040)=0x80000003, 0x4) r3 = syz_open_procfs(0x0, &(0x7f0000001840)='environ\x00') read$FUSE(r3, &(0x7f0000006c00)={0x2020}, 0x2020) ioctl$PPPIOCGUNIT(r3, 0x80047456, &(0x7f0000000240)) listen(r2, 0x3) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_int(r4, 0x0, 0x33, &(0x7f00000000c0)=0x80000003, 0x4) connect$inet(r4, &(0x7f0000000080)={0x2, 0x4e20, @empty}, 0x10) r5 = creat(&(0x7f0000000200)='./file0\x00', 0x17e) close(r5) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r7 = dup(r6) sendmsg$nl_route_sched(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000dc0)=@newqdisc={0x24, 0x24, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x0, 0x5}}}, 0x24}}, 0x0) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x200400, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r7}}) r8 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000380)='/dev/comedi3\x00', 0x48003, 0x0) ioctl$COMEDI_DEVCONFIG(r8, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r8, 0x40946400, &(0x7f0000000180)={'das16m1\x00', [0x4f26, 0x4, 0x3, 0x2, 0x5, 0xcc9, 0xf, 0x7, 0x45, 0x0, 0xef3, 0x4, 0x6, 0xffffffff, 0x3, 0x101, 0x1004, 0x1a449, 0x3, 0x40000007, 0x9d, 0xfff, 0x4, 0x20001e58, 0xf, 0x9c36, 0x3c, 0x0, 0x5, 0x7f, 0x4]}) r9 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0xfefffffd, 0xb2}, &(0x7f0000000000)=0x0, &(0x7f0000000280)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r10, 0x4, &(0x7f0000000040)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r10, 0x0, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x42, 0x0, @fd=r9, 0x0, 0x0, 0x0, {0x411a}}) io_uring_enter(r9, 0x47f6, 0x0, 0x4, 0x0, 0x0) write$tcp_congestion(r5, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000180)={'syztnl0\x00', &(0x7f0000000340)={'syztnl1\x00', 0x0, 0x700, 0xf29a53d61112ca63, 0x5, 0x5, {{0x17, 0x4, 0x1, 0x21, 0x5c, 0x65, 0x0, 0xf2, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, {[@end, @generic={0x86, 0x9, "1b2d8c49fd4450"}, @cipso={0x86, 0x3c, 0x0, [{0x2, 0xf, "4e9d419d5d733af6e154ebc0c8"}, {0x7, 0x10, "1a5748e4e903041cbdfa147442fc"}, {0x6, 0x5, "bc71f1"}, {0x0, 0x12, "bce29a770c77046086e932533c335147"}]}]}}}}}) 986.792326ms ago: executing program 2 (id=3406): socket(0x2b, 0x80801, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fchdir(r1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x0, 0x4, 0x8002, 0x0, 0x1, 0x1fffffffffff, 0x7, 0x8, 0x5}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback=0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000a479df"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r3, 0x2000000, 0xe, 0x0, &(0x7f0000000600)="c9f7b98600"/14, 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000035000900fffffffffddbdf25020000000c0001"], 0x20}}, 0x0) 911.558239ms ago: executing program 3 (id=3407): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64-generic\x00'}, 0x58) (async) r2 = accept4(r1, 0x0, 0x0, 0x0) sendto$packet(r2, &(0x7f00000002c0)="48357e0287af48ffa745b497a54e0eec1bf2c69011f35b48339d15afaef1bd7efe075ff441b16e244b8b05fe09e29583ad142567826dfa5cbc6f979b050015bde8c4441cd0fa6be03213181bfe84743015ec12ced8b1aa8f44e5c30afac6f9fd2ab1303be0d1b2c02533bcc97cce7da9b507b053b11821323590d379e9e350a3291fbedb6382de878b7a56e4e38c7f746d0424029f5d49b04697a4", 0xfffffffffffffe20, 0x0, 0x0, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2a, 0xa9}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r6 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) (async) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000380)=ANY=[@ANYRESDEC=r6, @ANYRES64=r0, @ANYBLOB='&', @ANYRESOCT=r6, @ANYRES16=r4, @ANYRES64=r2, @ANYRES32=r0, @ANYRESDEC=r5], 0x10) (async) sendmsg$inet(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f0000000080)='}', 0x1}], 0x1}, 0x2400c0b5) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r7}, &(0x7f0000000000), &(0x7f00000002c0)=r3}, 0x20) sendmsg$inet(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0xfdef}], 0x1}, 0x11) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r9, &(0x7f0000000000), 0x651, 0x0) r10 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r10}, &(0x7f0000bbdffc)=0x0) (async) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x3ef4, 0x81, r10}) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x5) timer_settime(r11, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) (async) r12 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x80c42, 0x0) read(r12, &(0x7f0000000040)=""/148, 0xffffff96) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) 377.403933ms ago: executing program 5 (id=3408): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0xfffc, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/kernel/profiling', 0x22042, 0x0) write$binfmt_misc(r2, &(0x7f0000000000), 0xfffffecc) syz_open_dev$sg(&(0x7f0000000100), 0x1fda, 0x440d02) splice(r1, 0x0, r3, 0x0, 0xbfd1, 0x0) ioctl$VIDIOC_DECODER_CMD(r2, 0xc0485660, &(0x7f0000000080)={0x3, 0x1, @raw_data=[0x8fe8, 0x1, 0x3, 0x3, 0x9, 0x1, 0x5, 0x80, 0x7, 0xfffff801, 0x100, 0x9, 0xfffffff9, 0x7, 0x5e0, 0x401]}) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x23, 0x28, 0xd27, 0x1003ffd, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0x9}, {0x0, 0x9}, {0xa, 0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x810}, 0x200008c4) listen(r0, 0x8) r5 = accept4(r0, 0x0, 0x0, 0x80800) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000080)=ANY=[], &(0x7f0000000300)='GPL\x00'}, 0x94) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r5, 0x84, 0x72, &(0x7f0000000000)={0x0, 0x101, 0x20}, &(0x7f0000000040)=0xc) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r5, 0x84, 0x10, &(0x7f0000000280)=@assoc_value={r6, 0x9}, 0x8) 352.568764ms ago: executing program 6 (id=3409): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB="300000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="0400020000000063060008001b0000000000005c8d1e90f5335e32c5c04e0fa2261ec2b3ea9b633e39e3f6e412d9ad6d2531cd0721b7301b56ab4d5b674d30f84715de5df894ea98e191168d16150cad3c8096ae8df105cec8ce5b6732033bee86ca3eb187a4a45e42fe3a577ba0fd0b758b4f2b4e5a4d10b86e3fe92e0712c0e7523df7fa1ac6ecc4cdc0d88e20a561293e6b1e845699a8c273a73e7312732b04fe83ab1543d57ccd097e805183d768cd1d8f00"/190], 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x40020) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48) (async) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001940)={0x20, 0x49, 0x1, 0x70bd26, 0xfffffffc, {0xa, 0x0, 0x6e1c}, [@typed={0x8, 0x300, 0x0, 0x0, @u32}, @nested={0x4, 0x2}]}, 0x20}}, 0x20048800) (async) writev(0xffffffffffffffff, 0x0, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000005c0)=@newlink={0x34, 0x10, 0x437, 0x1, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x40c89}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x4}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x44801}, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x1, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) (async) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x8400, 0x0) syz_open_dev$vcsa(&(0x7f00000000c0), 0x3, 0x400) (async) ioctl$FS_IOC_SETFLAGS(r3, 0x40186f40, &(0x7f0000000440)=0x1f) (async) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x1c, 0x3c, 0x1, 0x7fffa, 0x25dfdbfe, {0x1}, [@typed={0x8, 0xec, 0x0, 0x0, @u32=0x800b}]}, 0x1c}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x585d}, [@IFLA_PORT_SELF={0x4}, @IFLA_IFNAME={0x14, 0x3, 'ipvlan1\x00'}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x840}, 0x0) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) (async) syz_emit_ethernet(0x1d9, &(0x7f00000020c0)=ANY=[@ANYBLOB="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"], 0x0) (async) getpid() r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002300000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r5}, 0x10) (async) r6 = fsopen(&(0x7f0000000280)='cifs\x00', 0x0) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000000)={&(0x7f0000000340)={0x2, 0x3, 0x0, 0x2, 0xe, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x4e24, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x1}}, @sadb_sa={0x2}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x4e21, 0x2, @local, 0xb7c}}]}, 0x70}, 0x1, 0x7}, 0x0) (async) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000200)='source', &(0x7f00000002c0)='\\/\xe9\x838\x9d<\f\x91\a\xd4$\xae$\x91&6n @\xf4M\xba\xf2<\xd6A\xdb\xd7\xbeY@g\xcc\xca\n@\x06\xa3\xfe%\x02\x96\xb7b\xa7\x15R.\xa3`fd\xdc\x8b\x18rBl{\x82\xda\xbeA\x17\n\f\xcd=\'\x11\x1bZ\x8e\xa1\xc3j$v\xefw\x96/\xff\xa2\xfc\xe3\xb8\xc7\x0f\xaaQ\x98F*T\xd5\xcd4g+\xbd\xd1\xe0R\x9d\x18\x19a:\xa2\xdf\xbe\x8b\x89\x81', 0x0) socket$key(0xf, 0x3, 0x2) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24000040}, 0x44080) 0s ago: executing program 6 (id=3410): r0 = openat$sequencer(0xffffff9c, &(0x7f0000000040), 0x2000, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x401, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x4004884) sendmsg$TIPC_CMD_DISABLE_BEARER(0xffffffffffffffff, &(0x7f0000000a80)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x2c, r4, 0x100, 0x70bd26, 0x25dfdbff, {{}, {}, {0x10, 0x13, @l2={'ib', 0x3a, 'netpci0\x00'}}}, ["", "", "", "", ""]}, 0x2c}, 0x1, 0x0, 0x0, 0x2}, 0x4008800) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x4) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) getsockname$packet(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000440)=0x14) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000006c0)={&(0x7f0000000600)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x6c, 0x6c, 0x9, [@var={0xe, 0x0, 0x0, 0xe, 0x3, 0x2}, @volatile={0x5, 0x0, 0x0, 0x9, 0x2}, @const={0x6, 0x0, 0x0, 0xa, 0x1}, @func_proto={0x0, 0x7, 0x0, 0xd, 0x0, [{0xc}, {0x2, 0x3}, {0x9, 0x5}, {0x9, 0x4}, {0xf, 0x4}, {0xe, 0x5}, {0x1, 0x5}]}]}, {0x0, [0x30, 0x4f, 0x61, 0xef, 0x0, 0x30, 0x30]}}, &(0x7f0000000480)=""/13, 0x8d, 0xd, 0x0, 0x3, 0x10000}, 0x28) r7 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000780)=@o_path={&(0x7f0000000740)='./file0\x00', 0x0, 0x0, r0}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x18, 0x9, &(0x7f0000000340)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5}, [@jmp={0x5, 0x1, 0x3, 0xb, 0xb, 0x30}, @exit, @exit, @generic={0xc7, 0x6, 0x7, 0xb77d, 0x8}, @initr0={0x18, 0x0, 0x0, 0x0, 0x80000001}]}, &(0x7f00000001c0)='syzkaller\x00', 0xfffff1ef, 0x87, &(0x7f0000000540)=""/135, 0x41100, 0x15, '\x00', r5, 0x0, r6, 0x8, &(0x7f0000000700)={0x3, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0xa, &(0x7f00000007c0)=[r7], &(0x7f0000000800)=[{0x5, 0x3, 0xb, 0x6}, {0x4, 0x3, 0x3, 0x7}, {0x0, 0x1, 0x6, 0x3}, {0x0, 0x1, 0xa, 0x9}, {0x2, 0x2, 0xd, 0x1}, {0x5, 0x2, 0x8, 0x6}, {0x1, 0x4, 0x9, 0xc}, {0x2, 0x2, 0x7, 0x2}, {0x1, 0x2, 0x0, 0x3}, {0x2, 0x4, 0xa, 0x1}], 0x10, 0xe}, 0x94) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) r8 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f00000004c0)={0x38, 0x1403, 0x1, 0x70bd2d, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x854}, 0x0) prlimit64(r1, 0xc, &(0x7f0000000180)={0x8, 0x6}, &(0x7f0000000f80)) socket$nl_netfilter(0x10, 0x3, 0xc) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@ipv6_newrule={0x30, 0x20, 0x1, 0x0, 0x25dfdbfb, {0xa, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x3001a}, [@FRA_DST={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}, 0x30}}, 0x40000) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x5c, 0x10, 0x2, 0xfffffffc, 0x2, {0x0, 0x0, 0x0, 0x0, 0x10, 0x1000}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0xff}}]}}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20044082}, 0x24048000) kernel console output (not intermixed with test programs): g state [ 947.744081][T17793] bridge0: port 2(bridge_slave_1) entered disabled state [ 947.744255][T17793] bridge_slave_1: entered allmulticast mode [ 947.745622][T17793] bridge_slave_1: entered promiscuous mode [ 947.749387][T17831] kAFS: No cell specified [ 947.787558][T17832] kAFS: No cell specified [ 947.800070][T17821] tipc: Resetting bearer [ 947.834776][T17820] tipc: Resetting bearer [ 947.874193][T17820] tipc: Disabling bearer [ 948.028489][T17793] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 948.051590][T17793] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 948.612000][T17844] bridge: RTM_NEWNEIGH with invalid ether address [ 948.723416][T17793] team0: Port device team_slave_0 added [ 948.766529][T17793] team0: Port device team_slave_1 added [ 948.840356][T17793] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 948.878747][T17793] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 948.911807][T17793] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 948.924079][T17852] 9p: Bad value for 'wfdno' [ 949.053995][ T5832] Bluetooth: hci4: command tx timeout [ 949.103017][T17870] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 949.117062][T17870] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 949.167741][T17793] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 949.174996][T17793] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 949.201045][T17793] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 949.227768][T17872] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2570 sclass=netlink_route_socket pid=17872 comm=syz.1.2981 [ 949.263422][T17873] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17873 comm=syz.1.2981 [ 949.285542][T17872] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17872 comm=syz.1.2981 [ 949.313028][T17793] hsr_slave_0: entered promiscuous mode [ 949.335460][T17793] hsr_slave_1: entered promiscuous mode [ 949.979399][T17793] debugfs: 'hsr0' already exists in 'hsr' [ 950.003530][T17793] Cannot create hsr debugfs directory [ 950.008992][ T30] audit: type=1400 audit(4147484170.484:1071): avc: denied { append } for pid=17879 comm="syz.1.2982" name="event2" dev="devtmpfs" ino=922 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 950.767367][ T30] audit: type=1400 audit(4147484171.144:1072): avc: denied { ioctl } for pid=17882 comm="syz.2.2984" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 ioctlcmd=0xae77 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 950.797251][T17793] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 950.805880][T17889] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2985'. [ 950.853246][T17888] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2985'. [ 950.983498][T17793] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 951.057223][T17793] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 951.069697][T17793] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 951.076725][T17902] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2989'. [ 951.133537][ T5832] Bluetooth: hci4: command tx timeout [ 951.162763][ T30] audit: type=1400 audit(4147484171.634:1073): avc: denied { getopt } for pid=17897 comm="syz.3.2983" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 951.254647][T17916] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2983'. [ 951.311277][T17916] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2983'. [ 951.472526][T17924] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 951.489670][T17924] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 952.046521][T17793] 8021q: adding VLAN 0 to HW filter on device bond0 [ 952.071706][T17793] 8021q: adding VLAN 0 to HW filter on device team0 [ 952.085166][T14427] bridge0: port 1(bridge_slave_0) entered blocking state [ 952.092411][T14427] bridge0: port 1(bridge_slave_0) entered forwarding state [ 952.122810][T14427] bridge0: port 2(bridge_slave_1) entered blocking state [ 952.130507][T14427] bridge0: port 2(bridge_slave_1) entered forwarding state [ 952.265288][T17938] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 952.283562][T17938] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 952.380369][T17793] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 952.566475][T17945] overlay: Unknown parameter 'uid>00000000000000000007' [ 953.291818][T16959] Bluetooth: hci4: command tx timeout [ 953.356589][T17793] veth0_vlan: entered promiscuous mode [ 953.372937][T17793] veth1_vlan: entered promiscuous mode [ 953.410651][T17793] veth0_macvtap: entered promiscuous mode [ 953.438367][T17793] veth1_macvtap: entered promiscuous mode [ 953.469860][T17956] netlink: 'syz.2.2997': attribute type 8 has an invalid length. [ 953.474562][T17793] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 953.498989][T17793] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 953.517077][ T37] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 953.552584][ T37] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 953.581175][ T37] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 953.637800][ T37] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 953.743527][ T30] audit: type=1400 audit(4147484174.204:1074): avc: denied { getopt } for pid=17955 comm="syz.2.2997" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 953.803635][T17963] vlan0: entered promiscuous mode [ 953.911540][ T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 953.927733][ T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 953.962641][T17968] gretap0: left allmulticast mode [ 953.983821][T17968] gretap0: left promiscuous mode [ 953.994280][T17968] bridge0: port 3(gretap0) entered disabled state [ 954.012055][T17968] bridge_slave_0: left allmulticast mode [ 954.051838][T17976] netlink: 'syz.2.3002': attribute type 178 has an invalid length. [ 954.083613][T17968] bridge_slave_0: left promiscuous mode [ 954.089421][T17968] bridge0: port 1(bridge_slave_0) entered disabled state [ 954.160674][T17968] bridge_slave_1: left allmulticast mode [ 954.195380][T17968] bridge_slave_1: left promiscuous mode [ 954.205674][T17968] bridge0: port 2(bridge_slave_1) entered disabled state [ 954.231158][T17968] bond0: (slave bond_slave_1): Releasing backup interface [ 954.250415][T17968] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 954.317901][T11156] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 954.345249][T11156] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 954.419549][T17982] sctp: [Deprecated]: syz.3.3003 (pid 17982) Use of struct sctp_assoc_value in delayed_ack socket option. [ 954.419549][T17982] Use struct sctp_sack_info instead [ 955.334566][ T5832] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 955.348598][ T5832] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 955.357783][ T5832] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 955.370157][ T5832] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 955.375669][T16752] Bluetooth: hci4: command tx timeout [ 955.386174][T16752] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 955.986681][T11022] usb 3-1: USB disconnect, device number 26 [ 956.452883][T18001] chnl_net:caif_netlink_parms(): no params data found [ 956.517871][T18020] tipc: Enabled bearer , priority 0 [ 956.542857][T18020] syzkaller0: entered promiscuous mode [ 956.549107][T18020] syzkaller0: entered allmulticast mode [ 956.599251][T18020] tipc: Resetting bearer [ 956.617158][T18019] tipc: Resetting bearer [ 956.634739][T18019] tipc: Disabling bearer [ 956.642429][T18001] bridge0: port 1(bridge_slave_0) entered blocking state [ 956.653378][T18001] bridge0: port 1(bridge_slave_0) entered disabled state [ 956.661664][T18001] bridge_slave_0: entered allmulticast mode [ 956.671307][T18001] bridge_slave_0: entered promiscuous mode [ 956.679929][T18001] bridge0: port 2(bridge_slave_1) entered blocking state [ 956.687191][T18001] bridge0: port 2(bridge_slave_1) entered disabled state [ 956.694655][T18001] bridge_slave_1: entered allmulticast mode [ 956.701882][T18001] bridge_slave_1: entered promiscuous mode [ 956.760917][T18001] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 956.773178][T18001] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 956.811251][T18001] team0: Port device team_slave_0 added [ 956.820820][T18001] team0: Port device team_slave_1 added [ 956.852961][T18001] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 956.860177][T18001] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 956.886622][T18001] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 956.901238][T18001] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 956.908603][T18001] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 956.935800][T18001] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 956.970110][T18001] hsr_slave_0: entered promiscuous mode [ 956.976565][T18001] hsr_slave_1: entered promiscuous mode [ 956.982608][T18001] debugfs: 'hsr0' already exists in 'hsr' [ 956.988478][T18001] Cannot create hsr debugfs directory [ 956.994040][T11022] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 957.146567][T11022] usb 2-1: New USB device found, idVendor=0c45, idProduct=6005, bcdDevice=b5.55 [ 957.155886][T11022] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 957.164736][T11022] usb 2-1: Product: syz [ 957.168921][T11022] usb 2-1: Manufacturer: syz [ 957.173614][T11022] usb 2-1: SerialNumber: syz [ 957.184880][T11022] usb 2-1: config 0 descriptor?? [ 957.191664][T11022] gspca_main: sonixb-2.14.0 probing 0c45:6005 [ 957.362063][T18001] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 957.378089][T18001] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 957.390566][T18001] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 957.404271][T18001] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 957.419401][T18041] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 957.425945][T18041] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 957.437363][T18042] vhci_hcd vhci_hcd.0: pdev(3) rhport(1) sockfd(9) [ 957.443894][T18042] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 957.453646][T16959] Bluetooth: hci6: command tx timeout [ 957.457346][T18041] vhci_hcd vhci_hcd.0: Device attached [ 957.469274][T18042] vhci_hcd vhci_hcd.0: Device attached [ 957.664267][T18042] syz.3.3017 (18042): drop_caches: 2 [ 957.716054][T18001] 8021q: adding VLAN 0 to HW filter on device bond0 [ 957.793538][T16959] Bluetooth: hci4: Ignoring connect complete event for invalid link type [ 957.823429][T11022] usb 40-1: SetAddress Request (6) to port 0 [ 957.839982][T11022] usb 40-1: new SuperSpeed USB device number 6 using vhci_hcd [ 957.859392][T18001] 8021q: adding VLAN 0 to HW filter on device team0 [ 957.884913][T14427] bridge0: port 1(bridge_slave_0) entered blocking state [ 957.892091][T14427] bridge0: port 1(bridge_slave_0) entered forwarding state [ 957.914285][T14427] bridge0: port 2(bridge_slave_1) entered blocking state [ 957.921463][T14427] bridge0: port 2(bridge_slave_1) entered forwarding state [ 957.931224][T18053] syz.3.3017 (18053): drop_caches: 2 [ 957.966229][T18044] vhci_hcd: connection closed [ 957.967887][ T177] vhci_hcd vhci_hcd.3: stop threads [ 957.983012][T18043] vhci_hcd: connection reset by peer [ 957.989076][ T177] vhci_hcd vhci_hcd.3: release socket [ 958.010340][ T177] vhci_hcd vhci_hcd.3: disconnect device [ 958.028076][ T177] vhci_hcd vhci_hcd.3: stop threads [ 958.040524][ T177] vhci_hcd vhci_hcd.3: release socket [ 958.052184][ T177] vhci_hcd vhci_hcd.3: disconnect device [ 958.199411][T18001] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 958.256604][T18001] veth0_vlan: entered promiscuous mode [ 958.273360][ T5934] usb 4-1: new full-speed USB device number 13 using dummy_hcd [ 958.277996][T18001] veth1_vlan: entered promiscuous mode [ 958.321490][T18001] veth0_macvtap: entered promiscuous mode [ 958.345655][T18001] veth1_macvtap: entered promiscuous mode [ 958.372104][T18001] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 958.404079][T18001] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 958.416868][T16631] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 958.427758][ T5934] usb 4-1: device descriptor read/64, error -71 [ 958.435629][T16631] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 958.447205][T16631] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 958.457032][T16631] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 958.547103][T11156] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 958.555839][T11156] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 958.609154][T11156] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 958.632658][T11156] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 958.693692][ T5934] usb 4-1: new full-speed USB device number 14 using dummy_hcd [ 958.705571][ T30] audit: type=1400 audit(4147484179.184:1075): avc: denied { write } for pid=18079 comm="syz.2.3007" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 958.751626][ T30] audit: type=1400 audit(4147484179.204:1076): avc: denied { open } for pid=18079 comm="syz.2.3007" path="/dev/nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 958.823050][T18082] syzkaller0: entered promiscuous mode [ 958.829239][T18082] syzkaller0: entered allmulticast mode [ 958.884699][ T5934] usb 4-1: device descriptor read/64, error -71 [ 958.892763][T18095] tipc: Started in network mode [ 958.898311][T18095] tipc: Node identity 5e40af589464, cluster identity 4711 [ 958.905783][T18095] tipc: Enabled bearer , priority 0 [ 958.915045][T18095] syzkaller0: entered promiscuous mode [ 958.920650][T18095] syzkaller0: entered allmulticast mode [ 958.941392][T18094] tipc: Resetting bearer [ 958.961381][T18094] tipc: Disabling bearer [ 958.993644][ T5934] usb usb4-port1: attempt power cycle [ 959.024623][T18097] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3026'. [ 959.131809][T18103] fuse: Bad value for 'fd' [ 959.333246][ T5934] usb 4-1: new full-speed USB device number 15 using dummy_hcd [ 959.354027][ T5934] usb 4-1: device descriptor read/8, error -71 [ 959.453328][T17011] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 959.534025][T16959] Bluetooth: hci6: command tx timeout [ 959.594514][ T5934] usb 4-1: new full-speed USB device number 16 using dummy_hcd [ 959.605040][T17011] usb 3-1: config 1 has an invalid interface number: 174 but max is 0 [ 959.614157][T17011] usb 3-1: config 1 has no interface number 0 [ 959.620309][T17011] usb 3-1: config 1 interface 174 altsetting 0 has an endpoint descriptor with address 0x4E, changing to 0xE [ 959.632206][T17011] usb 3-1: config 1 interface 174 altsetting 0 endpoint 0xE has invalid maxpacket 1023, setting to 64 [ 959.632315][ T5934] usb 4-1: device descriptor read/8, error -71 [ 959.649808][T17011] usb 3-1: config 1 interface 174 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 959.660937][T17011] usb 3-1: config 1 interface 174 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 959.674345][T17011] usb 3-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=84.7d [ 959.684483][T17011] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 959.697851][T18107] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 959.747138][T17010] usb 2-1: USB disconnect, device number 13 [ 959.753875][ T5934] usb usb4-port1: unable to enumerate USB device [ 960.015580][T17011] usb 3-1: palm_os_3_probe - error -110 getting connection information [ 960.025383][T17011] visor 3-1:1.174: probe with driver visor failed with error -110 [ 960.083344][T17010] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 960.243209][T17010] usb 2-1: Using ep0 maxpacket: 32 [ 960.250358][T17010] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 960.260092][T17010] usb 2-1: config 0 has no interface number 0 [ 960.272768][T17010] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 960.282650][T17010] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 960.290983][T17010] usb 2-1: Product: syz [ 960.295851][T17010] usb 2-1: Manufacturer: syz [ 960.300758][T17010] usb 2-1: SerialNumber: syz [ 960.309146][T17010] usb 2-1: config 0 descriptor?? [ 960.318191][T17010] smsc95xx v2.0.0 [ 960.347755][T17011] usb 3-1: USB disconnect, device number 27 [ 960.519394][T17010] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 960.530541][T17010] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 960.709725][T18120] overlayfs: failed to clone upperpath [ 960.744219][T18109] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 960.763687][T18109] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 960.778372][T17010] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 960.824355][T17010] smsc95xx 2-1:0.67: probe with driver smsc95xx failed with error -32 [ 960.965081][T16752] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 960.976276][T16752] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 960.985228][T16752] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 960.999328][T16752] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 961.007439][T16752] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 961.222283][T18123] chnl_net:caif_netlink_parms(): no params data found [ 961.287910][T18123] bridge0: port 1(bridge_slave_0) entered blocking state [ 961.296700][T18123] bridge0: port 1(bridge_slave_0) entered disabled state [ 961.304234][T18123] bridge_slave_0: entered allmulticast mode [ 961.311152][T18123] bridge_slave_0: entered promiscuous mode [ 961.321815][T18123] bridge0: port 2(bridge_slave_1) entered blocking state [ 961.329113][T18123] bridge0: port 2(bridge_slave_1) entered disabled state [ 961.336268][T16622] usb 3-1: new full-speed USB device number 28 using dummy_hcd [ 961.344157][T18123] bridge_slave_1: entered allmulticast mode [ 961.351061][T18123] bridge_slave_1: entered promiscuous mode [ 961.386194][T18123] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 961.410401][T18123] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 961.446411][T18123] team0: Port device team_slave_0 added [ 961.458789][T18123] team0: Port device team_slave_1 added [ 961.485061][ T6151] veth0_to_bridge: left allmulticast mode [ 961.490905][ T6151] veth0_to_bridge: left promiscuous mode [ 961.497059][ T6151] bridge0: port 4(veth0_to_bridge) entered disabled state [ 961.503443][ T5934] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 961.512111][T16622] usb 3-1: device descriptor read/64, error -71 [ 961.520596][ T6151] batadv0: left allmulticast mode [ 961.527024][ T6151] batadv0: left promiscuous mode [ 961.532283][ T6151] bridge0: port 3(batadv0) entered disabled state [ 961.540196][ T6151] bridge_slave_1: left allmulticast mode [ 961.546625][ T6151] bridge_slave_1: left promiscuous mode [ 961.552311][ T6151] bridge0: port 2(bridge_slave_1) entered disabled state [ 961.561553][ T6151] bridge_slave_0: left allmulticast mode [ 961.567740][ T6151] bridge_slave_0: left promiscuous mode [ 961.573788][ T6151] bridge0: port 1(bridge_slave_0) entered disabled state [ 961.613879][T16959] Bluetooth: hci6: command tx timeout [ 961.684755][ T5934] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 961.696633][ T5934] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 961.705826][ T5934] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 961.715239][ T6151] tipc: Disabling bearer [ 961.716001][ T5934] usb 4-1: config 0 descriptor?? [ 961.763363][T16622] usb 3-1: new full-speed USB device number 29 using dummy_hcd [ 961.771433][ T6151] dvmrp8 (unregistering): left allmulticast mode [ 961.807296][ T6151] bond4 (unregistering): (slave geneve2): Releasing active interface [ 961.903200][T16622] usb 3-1: device descriptor read/64, error -71 [ 962.006607][ T6151] bond1 (unregistering): Released all slaves [ 962.023957][T16622] usb usb3-port1: attempt power cycle [ 962.153775][ T6151] bond2 (unregistering): (slave veth5): Releasing active interface [ 962.162718][ T6151] bond2 (unregistering): Released all slaves [ 962.178048][ T6151] bond0 (unregistering): Released all slaves [ 962.530711][ T6151] bond3 (unregistering): (slave veth7): Releasing active interface [ 962.545964][ T6151] bond3 (unregistering): Released all slaves [ 962.785251][T16622] usb 3-1: new full-speed USB device number 30 using dummy_hcd [ 962.810057][T17954] usb 2-1: USB disconnect, device number 14 [ 962.831657][T16622] usb 3-1: device descriptor read/8, error -71 [ 962.905547][ T6151] bond4 (unregistering): Released all slaves [ 962.980716][T11022] usb 40-1: device descriptor read/8, error -110 [ 963.068657][T16959] Bluetooth: hci1: command tx timeout [ 963.115732][ T6151] bond5 (unregistering): Released all slaves [ 963.143660][T16622] usb 3-1: new full-speed USB device number 31 using dummy_hcd [ 963.169556][T16622] usb 3-1: device descriptor read/8, error -71 [ 963.293549][T16622] usb usb3-port1: unable to enumerate USB device [ 963.376848][T11022] usb usb40-port1: attempt power cycle [ 963.450949][ T6151] bond6 (unregistering): (slave veth11): Releasing active interface [ 963.469184][ T6151] bond6 (unregistering): Released all slaves [ 963.565578][T18123] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 963.572942][T18123] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 963.601528][T18123] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 963.694756][T16959] Bluetooth: hci6: command tx timeout [ 963.706691][T18123] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 963.714573][T18123] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 963.752172][T18123] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 963.859580][ T6151] tipc: Left network mode [ 963.967443][T11022] usb usb40-port1: unable to enumerate USB device [ 964.008076][T18123] hsr_slave_0: entered promiscuous mode [ 964.017822][T18123] hsr_slave_1: entered promiscuous mode [ 964.034546][T18123] debugfs: 'hsr0' already exists in 'hsr' [ 964.040405][T18123] Cannot create hsr debugfs directory [ 964.099687][T18151] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 964.117285][ T5934] usbhid 4-1:0.0: can't add hid device: -71 [ 964.127364][T18151] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 964.150024][ T5934] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 964.166854][ T5934] usb 4-1: USB disconnect, device number 17 [ 964.241698][T18158] random: crng reseeded on system resumption [ 964.249341][T18154] SELinux: failed to load policy [ 964.265115][T18154] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3041'. [ 964.435297][T18158] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3042'. [ 965.029103][ T30] audit: type=1400 audit(4147484185.504:1077): avc: denied { setopt } for pid=18183 comm="syz.2.3048" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 965.052050][T18182] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3047'. [ 965.062151][T18182] tc_dump_action: action bad kind [ 965.098523][ T6151] hsr_slave_0: left promiscuous mode [ 965.105684][ T6151] hsr_slave_1: left promiscuous mode [ 965.111688][ T6151] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 965.119844][ T6151] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 965.143372][T16959] Bluetooth: hci1: command tx timeout [ 965.193209][T17954] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 965.343782][T17954] usb 4-1: Using ep0 maxpacket: 32 [ 965.350825][T17954] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 965.371125][T17954] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 965.397310][T17954] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 965.406545][T17954] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 965.425438][T17954] usb 4-1: config 0 descriptor?? [ 965.432754][T17954] hub 4-1:0.0: USB hub found [ 965.527554][ T6151] team0 (unregistering): Port device team_slave_1 removed [ 965.578719][ T6151] team0 (unregistering): Port device team_slave_0 removed [ 965.697889][T17954] hub 4-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 966.311384][T17954] hid-generic 0003:046D:C31C.001F: hidraw0: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.3-1/input0 [ 966.588440][ T30] audit: type=1400 audit(4147484187.064:1078): avc: denied { setattr } for pid=18194 comm="syz.1.3050" path="socket:[59663]" dev="sockfs" ino=59663 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 966.619111][T18195] netem: change failed [ 966.624002][T17339] usb 4-1: USB disconnect, device number 18 [ 966.640404][T18195] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.3050'. [ 966.716695][T18197] fuse: Bad value for 'fd' [ 966.743002][ T6151] IPVS: stop unused estimator thread 0... [ 966.775359][T18123] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 966.788407][T18198] openvswitch: : Dropping previously announced user features [ 966.796530][T18123] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 966.808506][T18123] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 966.827234][T18123] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 966.908146][T18198] kvm: kvm [18196]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 966.931555][T18123] 8021q: adding VLAN 0 to HW filter on device bond0 [ 966.941463][T18198] kvm: kvm [18196]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 966.986469][T18123] 8021q: adding VLAN 0 to HW filter on device team0 [ 967.016508][ T1138] bridge0: port 1(bridge_slave_0) entered blocking state [ 967.023732][ T1138] bridge0: port 1(bridge_slave_0) entered forwarding state [ 967.075711][ T2900] bridge0: port 2(bridge_slave_1) entered blocking state [ 967.082834][ T2900] bridge0: port 2(bridge_slave_1) entered forwarding state [ 967.147584][T18123] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 967.185253][T18123] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 967.213365][T16959] Bluetooth: hci1: command tx timeout [ 967.480627][T17339] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 967.633259][T17339] usb 3-1: device descriptor read/64, error -71 [ 967.683065][T18123] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 967.757958][T18123] veth0_vlan: entered promiscuous mode [ 967.765342][T18232] tipc: Enabled bearer , priority 0 [ 967.777408][T18232] syzkaller0: entered promiscuous mode [ 967.783622][T18232] syzkaller0: entered allmulticast mode [ 967.792399][T18123] veth1_vlan: entered promiscuous mode [ 967.814216][T18232] tipc: Resetting bearer [ 967.822719][T18231] tipc: Resetting bearer [ 967.837856][T18231] tipc: Disabling bearer [ 967.857847][T18123] veth0_macvtap: entered promiscuous mode [ 967.866349][T18123] veth1_macvtap: entered promiscuous mode [ 967.880871][T18123] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 967.902182][T18123] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 967.911733][ T5971] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 967.919467][T17339] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 967.942187][T16631] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 967.952402][T16631] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 967.961381][T16631] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 967.971907][T16631] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 968.040359][ T2900] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 968.049318][ T2900] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 968.074021][ T5971] usb 2-1: Using ep0 maxpacket: 8 [ 968.082275][T17339] usb 3-1: device descriptor read/64, error -71 [ 968.088517][ T6151] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 968.099483][ T5971] usb 2-1: config 0 has an invalid interface number: 144 but max is 0 [ 968.099909][ T6151] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 968.120360][ T5971] usb 2-1: config 0 has no interface number 0 [ 968.134598][ T5971] usb 2-1: New USB device found, idVendor=2c7c, idProduct=0512, bcdDevice=ce.e9 [ 968.146478][ T5971] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 968.159347][ T5971] usb 2-1: config 0 descriptor?? [ 968.193627][T17339] usb usb3-port1: attempt power cycle [ 968.379643][ T5971] qmi_wwan 2-1:0.144: probe with driver qmi_wwan failed with error -22 [ 968.405790][ T5971] usb 2-1: USB disconnect, device number 15 [ 968.543233][T17339] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 968.562628][ T30] audit: type=1400 audit(4147484189.034:1079): avc: denied { unmount } for pid=16750 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 968.588530][T17339] usb 3-1: device descriptor read/8, error -71 [ 968.843268][T17339] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 968.864666][T17339] usb 3-1: device descriptor read/8, error -71 [ 968.944768][ T5971] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 968.985043][T17339] usb usb3-port1: unable to enumerate USB device [ 969.118496][ T5971] usb 4-1: Using ep0 maxpacket: 32 [ 969.136608][ T5971] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 969.157047][ T5971] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 969.344004][T16959] Bluetooth: hci1: command tx timeout [ 969.369298][ T5971] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 969.700908][ T5971] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 969.716985][ T5971] usb 4-1: config 0 descriptor?? [ 969.725010][ T5971] hub 4-1:0.0: USB hub found [ 969.929137][ T5971] hub 4-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 970.081514][T18267] netlink: 'syz.0.3067': attribute type 3 has an invalid length. [ 970.089419][T18267] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3067'. [ 970.623220][T17878] usb 1-1: new high-speed USB device number 97 using dummy_hcd [ 970.650968][ T5971] hid-generic 0003:046D:C31C.0020: hidraw0: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.3-1/input0 [ 970.728724][T18281] tipc: Started in network mode [ 970.783212][T17878] usb 1-1: Using ep0 maxpacket: 16 [ 970.798680][T18281] tipc: Node identity 7e7809ba6a0c, cluster identity 4711 [ 970.808777][T17878] usb 1-1: config 0 has no interfaces? [ 970.816563][T18281] tipc: Enabled bearer , priority 0 [ 970.829866][T18286] syzkaller0: entered promiscuous mode [ 970.863928][T17878] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 970.869390][T18286] syzkaller0: entered allmulticast mode [ 970.876830][T17878] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 970.909349][T17878] usb 1-1: Manufacturer: syz [ 970.916875][T17878] usb 1-1: config 0 descriptor?? [ 970.982123][T18281] tipc: Resetting bearer [ 970.993386][T17878] usb 4-1: USB disconnect, device number 19 [ 971.010788][T18280] tipc: Resetting bearer [ 971.051037][T18280] tipc: Disabling bearer [ 973.574947][ T5952] usb 1-1: USB disconnect, device number 97 [ 973.589138][ T30] audit: type=1400 audit(4147484194.064:1080): avc: denied { ioctl } for pid=18298 comm="syz.2.3074" path="/dev/vhost-vsock" dev="devtmpfs" ino=1275 ioctlcmd=0xaf07 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 973.665222][T18300] x_tables: duplicate underflow at hook 2 [ 974.093232][ T5952] usb 3-1: new full-speed USB device number 36 using dummy_hcd [ 974.244632][T18333] No such timeout policy "syz1" [ 974.351170][ T5952] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 974.674546][ T5952] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 974.703602][ T5952] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 974.724480][ T5952] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 974.773383][T18305] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 974.781028][ T5952] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 974.800652][ T5952] usb 3-1: Manufacturer: syz [ 974.811615][ T5952] usb 3-1: config 0 descriptor?? [ 974.953256][T18305] usb 4-1: Using ep0 maxpacket: 8 [ 974.967707][T18305] usb 4-1: config 0 has an invalid descriptor of length 71, skipping remainder of the config [ 974.978696][T18305] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 974.989747][T18343] netlink: 64 bytes leftover after parsing attributes in process `syz.0.3082'. [ 975.001069][T18343] netlink: 64 bytes leftover after parsing attributes in process `syz.0.3082'. [ 975.017122][T18305] usb 4-1: New USB device found, idVendor=0d46, idProduct=0081, bcdDevice= f.2b [ 975.036623][T18305] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 975.063229][T18305] usb 4-1: Product: syz [ 975.074347][T17878] usb 2-1: new full-speed USB device number 16 using dummy_hcd [ 975.102742][T18305] usb 4-1: Manufacturer: syz [ 975.109455][T18305] usb 4-1: SerialNumber: syz [ 975.123264][T18305] usb 4-1: config 0 descriptor?? [ 975.143291][ T5952] rc_core: IR keymap rc-hauppauge not found [ 975.160093][ T5952] Registered IR keymap rc-empty [ 975.173852][ T5952] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 975.205776][ T5952] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 975.235427][ T5952] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 975.244811][T17878] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 975.267427][ T5952] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input49 [ 975.303959][T17878] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 975.313970][T17878] usb 2-1: config 0 descriptor?? [ 975.319403][ T5952] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 975.335900][T17878] cp210x 2-1:0.0: cp210x converter detected [ 975.363474][ T5952] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 975.383381][ T5952] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 975.413463][ T5952] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 975.446612][ T5952] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 975.483665][ T5952] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 975.524503][ T5952] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 975.553579][ T5952] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 976.286311][ T5952] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 976.333738][ T5952] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 976.365264][ T5952] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 976.382921][ T30] audit: type=1400 audit(4147484196.864:1081): avc: denied { read } for pid=18351 comm="syz.0.3084" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 976.385182][ T5952] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 976.448573][ T5952] usb 3-1: USB disconnect, device number 36 [ 976.528677][T18352] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 976.536633][T18352] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 976.542598][T18352] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 976.556781][T18352] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 976.564133][T18352] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 976.570083][T18352] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 976.576794][T18352] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 976.584243][T18352] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 976.590205][T18352] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 976.602662][T18352] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 976.610914][T18352] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 976.616933][T18352] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 976.623722][T18352] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 976.632110][T18352] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 976.638125][T18352] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 976.646074][T18352] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 977.063096][T18305] usb 4-1: USB disconnect, device number 20 [ 977.085208][T17878] cp210x 2-1:0.0: failed to get vendor val 0x370b size 1: -32 [ 977.129308][T17878] cp210x 2-1:0.0: querying part number failed [ 977.166274][T17878] usb 2-1: cp210x converter now attached to ttyUSB0 [ 977.433377][T18305] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 977.633309][T18305] usb 4-1: Using ep0 maxpacket: 32 [ 977.639983][T18305] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 977.659740][T18305] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 977.685221][T18305] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 977.711778][T18305] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 977.726056][T18305] usb 4-1: config 0 descriptor?? [ 977.734650][T18305] hub 4-1:0.0: USB hub found [ 978.309995][T18305] hub 4-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 978.493283][T16959] Bluetooth: hci2: command 0x0406 tx timeout [ 978.573623][T16959] Bluetooth: hci3: command 0x0405 tx timeout [ 978.653348][ T5832] Bluetooth: hci5: command 0x0c1a tx timeout [ 978.659906][T16959] Bluetooth: hci6: command 0x0c1a tx timeout [ 978.733202][T16959] Bluetooth: hci1: command 0x0c1a tx timeout [ 978.748813][T16752] Bluetooth: hci4: command 0x0c1a tx timeout [ 978.748834][T18305] hid-generic 0003:046D:C31C.0021: hidraw0: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.3-1/input0 [ 978.804948][T18374] XFS (nbd5): SB validate failed with error -5. [ 978.819891][T17010] usb 2-1: USB disconnect, device number 16 [ 978.865921][T17010] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 978.894379][T17010] cp210x 2-1:0.0: device disconnected [ 978.991037][T18383] bridge: RTM_NEWNEIGH with invalid ether address [ 979.123588][T18305] usb 4-1: USB disconnect, device number 21 [ 980.138026][ T30] audit: type=1400 audit(4147484327.616:1082): avc: denied { append } for pid=18400 comm="syz.3.3093" name="renderD128" dev="devtmpfs" ino=626 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 980.330432][T18408] tipc: Enabled bearer , priority 0 [ 980.385029][T18408] syzkaller0: entered promiscuous mode [ 980.391239][T18408] syzkaller0: entered allmulticast mode [ 980.491767][T18408] tipc: Resetting bearer [ 980.517319][T18411] syzkaller0: entered promiscuous mode [ 980.522983][T18411] syzkaller0: entered allmulticast mode [ 980.663875][T16752] Bluetooth: hci3: command 0x0405 tx timeout [ 980.748982][T16752] Bluetooth: hci6: command 0x0c1a tx timeout [ 980.748997][T16959] Bluetooth: hci5: command 0x0c1a tx timeout [ 980.859903][T16752] Bluetooth: hci1: command 0x0c1a tx timeout [ 980.866152][T16959] Bluetooth: hci4: command 0x0c1a tx timeout [ 981.209024][T18422] netlink: 'syz.0.3100': attribute type 4 has an invalid length. [ 981.269052][T18423] netlink: 'syz.0.3100': attribute type 4 has an invalid length. [ 982.734491][T16959] Bluetooth: hci3: command 0x0405 tx timeout [ 982.814610][T16959] Bluetooth: hci6: command 0x0c1a tx timeout [ 982.831593][T16959] Bluetooth: hci5: command 0x0c1a tx timeout [ 982.850886][T18406] tipc: Resetting bearer [ 982.867684][T18406] tipc: Disabling bearer [ 982.894523][T16752] Bluetooth: hci1: command 0x0c1a tx timeout [ 982.901217][T16959] Bluetooth: hci4: command 0x0c1a tx timeout [ 982.949066][T11022] tipc: Node number set to 343148986 [ 983.847147][T11022] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 983.903223][T17878] usb 1-1: new high-speed USB device number 98 using dummy_hcd [ 984.033596][T11022] usb 3-1: Using ep0 maxpacket: 16 [ 984.045413][T11022] usb 3-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 984.057845][T11022] usb 3-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0 [ 984.067924][T11022] usb 3-1: config 0 interface 0 has no altsetting 0 [ 984.074947][T11022] usb 3-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 984.084262][T11022] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 984.093807][T17878] usb 1-1: Using ep0 maxpacket: 32 [ 984.095083][T11022] usb 3-1: config 0 descriptor?? [ 984.108565][T17878] usb 1-1: config 0 has an invalid interface number: 176 but max is 0 [ 984.118349][T17878] usb 1-1: config 0 has no interface number 0 [ 984.127361][T17878] usb 1-1: New USB device found, idVendor=1a0a, idProduct=0108, bcdDevice=ef.d2 [ 984.136890][T17878] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 984.145285][T17878] usb 1-1: Product: syz [ 984.149471][T17878] usb 1-1: Manufacturer: syz [ 984.155464][T17878] usb 1-1: SerialNumber: syz [ 984.279685][T17878] usb 1-1: config 0 descriptor?? [ 984.293309][T17010] usb 2-1: new full-speed USB device number 17 using dummy_hcd [ 984.296865][T17878] usb_ehset_test 1-1:0.176: probe with driver usb_ehset_test failed with error -32 [ 984.461603][T17010] usb 2-1: config 0 has an invalid interface number: 108 but max is 0 [ 984.472059][T17010] usb 2-1: config 0 has an invalid descriptor of length 20, skipping remainder of the config [ 984.482646][T17010] usb 2-1: config 0 has no interface number 0 [ 984.488864][T17010] usb 2-1: config 0 interface 108 has no altsetting 0 [ 984.496128][T17010] usb 2-1: New USB device found, idVendor=0e8f, idProduct=0003, bcdDevice= 0.00 [ 984.505408][T17010] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 984.516286][T17010] usb 2-1: config 0 descriptor?? [ 984.541794][T11022] nzxt-smart2 0003:1E71:2009.0022: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.2-1/input0 [ 984.544486][T17878] usb 1-1: USB disconnect, device number 98 [ 984.732988][T11022] usb 3-1: USB disconnect, device number 37 [ 985.313298][T11022] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 985.479639][T11022] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 985.499379][T11022] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 985.510146][T11022] usb 4-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 985.519721][T11022] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 985.528424][T17010] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 985.607379][T11022] usb 4-1: config 0 descriptor?? [ 985.735660][T17010] usb 3-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 985.763957][T18476] gfs2: error -5 reading superblock [ 985.771263][T17010] usb 3-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 985.801897][T17010] usb 3-1: config 0 interface 0 has no altsetting 0 [ 985.811381][T17010] usb 3-1: New USB device found, idVendor=054c, idProduct=0268, bcdDevice= 0.00 [ 985.822190][T17010] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 985.856547][T17010] usb 3-1: config 0 descriptor?? [ 986.133565][T11022] cp2112 0003:10C4:EA90.0023: unknown main item tag 0x0 [ 986.152603][T11022] cp2112 0003:10C4:EA90.0023: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.3-1/input0 [ 986.206749][T18479] tipc: Started in network mode [ 986.211835][T18479] tipc: Node identity 7a7ca5472289, cluster identity 4711 [ 986.220591][T18479] tipc: Enabled bearer , priority 0 [ 986.228645][T18479] syzkaller0: entered promiscuous mode [ 986.234331][T18479] syzkaller0: entered allmulticast mode [ 986.268925][T11022] cp2112 0003:10C4:EA90.0023: Part Number: 0x82 Device Version: 0xFE [ 986.279760][T18479] tipc: Resetting bearer [ 986.290493][T18478] tipc: Resetting bearer [ 986.313898][T18478] tipc: Disabling bearer [ 986.374911][T17010] sony 0003:054C:0268.0024: hiddev0,hidraw1: USB HID v80.05 Device [HID 054c:0268] on usb-dummy_hcd.2-1/input0 [ 986.387080][T17010] sony 0003:054C:0268.0024: failed to claim input [ 986.452171][T18489] binder: binder_mmap: 18486 200000001000-20000000b000 bad vm_flags failed -1 [ 986.703408][T17010] usb 1-1: new high-speed USB device number 99 using dummy_hcd [ 986.856718][T17878] usb 4-1: USB disconnect, device number 22 [ 986.864219][T18495] netlink: 'syz.2.3115': attribute type 1 has an invalid length. [ 987.340397][T17010] usb 1-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 987.357893][T17010] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 987.381330][T17010] usb 1-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 987.392148][T17010] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 987.406923][T17010] usb 1-1: Product: syz [ 987.414256][T17010] usb 1-1: Manufacturer: syz [ 987.419041][T17010] usb 1-1: SerialNumber: syz [ 987.427023][T11022] usb 2-1: USB disconnect, device number 17 [ 987.450596][T17010] rtl8150 1-1:1.0: couldn't find required endpoints [ 987.465423][T17010] rtl8150 1-1:1.0: probe with driver rtl8150 failed with error -5 [ 987.489928][T18500] tipc: Enabling of bearer rejected, failed to enable media [ 987.720057][T18507] netlink: 96 bytes leftover after parsing attributes in process `syz.3.3122'. [ 988.123703][T17878] usb 1-1: USB disconnect, device number 99 [ 988.482599][T17010] usb 3-1: USB disconnect, device number 38 [ 988.839529][T18530] bridge: RTM_NEWNEIGH with invalid ether address [ 988.849180][T18534] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 988.858217][T18534] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 988.868664][ T30] audit: type=1400 audit(4147484336.346:1083): avc: denied { mounton } for pid=18533 comm="syz.0.3130" path="/" dev="tmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=lnk_file permissive=1 [ 989.563451][T18305] usb 1-1: new high-speed USB device number 100 using dummy_hcd [ 989.641066][T18547] block device autoloading is deprecated and will be removed. [ 989.733258][T18305] usb 1-1: Using ep0 maxpacket: 32 [ 989.740223][T18305] usb 1-1: unable to get BOS descriptor or descriptor too short [ 989.771698][T18305] usb 1-1: config 1 has an invalid interface number: 167 but max is 0 [ 989.789161][T18305] usb 1-1: config 1 has no interface number 0 [ 989.792890][T18549] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3135'. [ 989.798677][T18305] usb 1-1: config 1 interface 167 has no altsetting 0 [ 989.815428][T18305] usb 1-1: New USB device found, idVendor=2001, idProduct=3309, bcdDevice=3c.8c [ 989.821026][ T13] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 989.824876][T18305] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 989.833928][ T13] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 989.842390][T18305] usb 1-1: Product: syz [ 989.849041][T11022] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 989.852870][T18305] usb 1-1: Manufacturer: syz [ 989.865908][T18305] usb 1-1: SerialNumber: syz [ 989.883378][T17010] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 990.035662][T17010] usb 2-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 990.048126][T17010] usb 2-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 990.057429][T17010] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 990.065718][T17010] usb 2-1: Product: syz [ 990.069963][T17010] usb 2-1: Manufacturer: syz [ 990.076702][T17010] usb 2-1: SerialNumber: syz [ 990.086216][T17010] usb 2-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state [ 990.090050][T18305] usb 1-1: USB disconnect, device number 100 [ 990.095883][T11022] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 990.164388][T11022] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 990.340237][T18553] program syz.1.3134 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 990.601057][T17010] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 990.612098][T17010] dvbdev: DVB: registering new adapter (774 Friio White ISDB-T USB2.0) [ 990.620602][T17010] usb 2-1: media controller created [ 990.640101][T17010] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 990.691664][T17010] usb 2-1: USB disconnect, device number 18 [ 992.495582][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 994.013349][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1002.093282][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1018.093695][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1050.743314][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1053.935511][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 1115.374567][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 1120.494784][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1146.420162][T18569] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3141'. [ 1146.434549][T18569] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3141'. [ 1146.603239][T17010] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 1146.825338][T17010] usb 2-1: Using ep0 maxpacket: 32 [ 1146.865213][T17010] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1146.883214][T17011] usb 1-1: new full-speed USB device number 101 using dummy_hcd [ 1146.893272][T17010] usb 2-1: config 7 has an invalid interface number: 187 but max is 0 [ 1146.902435][T17010] usb 2-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 1146.919787][T17010] usb 2-1: config 7 has no interface number 0 [ 1146.926325][T17010] usb 2-1: config 7 interface 187 altsetting 6 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1146.937163][T17010] usb 2-1: config 7 interface 187 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1146.953361][T17010] usb 2-1: config 7 interface 187 has no altsetting 0 [ 1146.983835][T17010] usb 2-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb [ 1146.996649][T17010] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1147.005157][T17010] usb 2-1: Product: syz [ 1147.009748][T17010] usb 2-1: Manufacturer: syz [ 1147.015779][T17010] usb 2-1: SerialNumber: syz [ 1147.055318][T17011] usb 1-1: config 0 has an invalid interface number: 31 but max is 0 [ 1147.063731][T17011] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1147.073973][T17011] usb 1-1: config 0 has no interface number 0 [ 1147.082106][T17011] usb 1-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 1147.091547][T17011] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1147.099669][T17011] usb 1-1: Product: syz [ 1147.103913][T17011] usb 1-1: Manufacturer: syz [ 1147.108545][T17011] usb 1-1: SerialNumber: syz [ 1147.115137][T17011] usb 1-1: config 0 descriptor?? [ 1147.121333][T17011] hub 1-1:0.31: bad descriptor, ignoring hub [ 1147.127547][T17011] hub 1-1:0.31: probe with driver hub failed with error -5 [ 1147.135833][T17011] uvcvideo 1-1:0.31: Found UVC 0.04 device syz (046d:08c3) [ 1147.143280][T17011] uvcvideo 1-1:0.31: Entity type for entity Output 6 was not initialized! [ 1147.152352][T17011] uvcvideo 1-1:0.31: Failed to create links for entity 6 [ 1147.159498][T17011] uvcvideo 1-1:0.31: Failed to register entities (-22). [ 1147.245489][T17010] usb 2-1: Unknown endpoint type found, address 0x07 [ 1147.422882][T17010] usb 2-1: Not enough endpoints found in device, aborting! [ 1147.432999][T18580] atomic_op ffff8880810ce198 conn xmit_atomic 0000000000000000 [ 1147.471015][ T30] audit: type=1400 audit(4147484494.946:1084): avc: granted { setsecparam } for pid=18585 comm="syz.2.3147" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 1147.485749][T18564] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1147.501919][T18564] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1147.531753][T17010] usb 2-1: USB disconnect, device number 19 [ 1147.557426][T18589] bridge: RTM_NEWNEIGH with invalid ether address [ 1147.654166][T18305] usb 1-1: USB disconnect, device number 101 [ 1148.111005][T18591] tipc: Enabled bearer , priority 0 [ 1148.119166][T18591] mac80211_hwsim hwsim28 syzkaller0: entered promiscuous mode [ 1148.126867][T18591] mac80211_hwsim hwsim28 syzkaller0: entered allmulticast mode [ 1148.929266][T18595] netlink: 'syz.0.3149': attribute type 9 has an invalid length. [ 1149.218719][T11022] tipc: Node number set to 1492493639 [ 1149.751875][T18607] random: crng reseeded on system resumption [ 1150.200374][T18617] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3157'. [ 1150.239639][T18619] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3156'. [ 1150.274019][T18619] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3156'. [ 1150.440646][ T30] audit: type=1400 audit(4147484497.916:1085): avc: denied { read } for pid=18631 comm="syz.2.3161" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 1150.455920][T18632] tipc: Enabled bearer , priority 0 [ 1150.520946][T18638] kAFS: unable to lookup cell '({^@' [ 1150.547614][T18632] syzkaller0: entered promiscuous mode [ 1150.561870][T18632] syzkaller0: entered allmulticast mode [ 1150.620509][T18628] tipc: Resetting bearer [ 1150.680904][T18628] tipc: Disabling bearer [ 1150.865587][T18305] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 1150.909461][T18651] bridge: RTM_NEWNEIGH with invalid ether address [ 1151.023226][T18305] usb 3-1: Using ep0 maxpacket: 16 [ 1151.031857][T18305] usb 3-1: config 254 has an invalid interface number: 235 but max is 0 [ 1151.040884][T18305] usb 3-1: config 254 has no interface number 0 [ 1151.051055][T18305] usb 3-1: config 254 interface 235 altsetting 2 bulk endpoint 0x6 has invalid maxpacket 32 [ 1151.096872][T18305] usb 3-1: config 254 interface 235 altsetting 2 endpoint 0x82 has an invalid bInterval 255, changing to 11 [ 1151.128482][T18305] usb 3-1: config 254 interface 235 altsetting 2 endpoint 0x82 has invalid maxpacket 59391, setting to 1024 [ 1151.140663][T18305] usb 3-1: config 254 interface 235 has no altsetting 0 [ 1151.150239][T18305] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice=2b.f1 [ 1151.187032][T18305] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=5 [ 1151.209758][T18305] usb 3-1: Product: syz [ 1151.221873][T18305] usb 3-1: Manufacturer: syz [ 1151.230938][T18656] wireguard0: entered promiscuous mode [ 1151.237701][T18656] wireguard0: entered allmulticast mode [ 1151.247338][T18305] usb 3-1: SerialNumber: syz [ 1151.290302][T18643] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1151.308066][T18662] netlink: 269 bytes leftover after parsing attributes in process `syz.0.3170'. [ 1151.324266][T18643] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1151.549238][T18305] usbtest 3-1:254.235: couldn't get endpoints, -71 [ 1151.567465][T18305] usbtest 3-1:254.235: probe with driver usbtest failed with error -71 [ 1151.593002][T18305] usb 3-1: USB disconnect, device number 39 [ 1151.743514][T17011] usb 1-1: new high-speed USB device number 102 using dummy_hcd [ 1151.900710][T17011] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1152.119581][T17011] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1152.139518][T17011] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1152.161378][T17011] usb 1-1: config 0 descriptor?? [ 1152.217931][T18681] bridge0: port 2(bridge_slave_1) entered disabled state [ 1152.225621][T18681] bridge0: port 1(bridge_slave_0) entered disabled state [ 1152.442906][ T30] audit: type=1400 audit(4147484499.916:1086): avc: denied { create } for pid=18663 comm="syz.0.3171" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 1153.015605][T17011] usbhid 1-1:0.0: can't add hid device: -71 [ 1153.022416][T17011] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 1153.277247][T17011] usb 1-1: USB disconnect, device number 102 [ 1153.447148][T18681] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1153.535788][T18702] netlink: 220 bytes leftover after parsing attributes in process `syz.1.3180'. [ 1154.039531][T17011] usb 1-1: new high-speed USB device number 103 using dummy_hcd [ 1154.122067][T18705] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1154.131994][T18705] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1154.181410][T18705] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1154.203312][T17011] usb 1-1: Using ep0 maxpacket: 32 [ 1154.221543][T17011] usb 1-1: no configurations [ 1154.235868][T18705] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1154.248056][T17011] usb 1-1: can't read configurations, error -22 [ 1154.473203][T17011] usb 1-1: new high-speed USB device number 104 using dummy_hcd [ 1155.250413][T18740] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1155.360217][ T30] audit: type=1400 audit(4147484502.826:1087): avc: denied { connect } for pid=18737 comm="syz.5.3189" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1155.403862][T18305] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 1155.447565][T18744] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3191'. [ 1155.565449][T18305] usb 2-1: Using ep0 maxpacket: 16 [ 1155.578768][T18305] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1155.594573][T18305] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1155.619022][T18305] usb 2-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.28 [ 1155.630382][T18305] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1155.638854][T18305] usb 2-1: Product: syz [ 1155.643492][T18305] usb 2-1: Manufacturer: syz [ 1155.648103][T18305] usb 2-1: SerialNumber: syz [ 1155.655368][T18305] usb 2-1: config 0 descriptor?? [ 1155.930499][T18763] netlink: 'syz.3.3196': attribute type 10 has an invalid length. [ 1155.938778][T18763] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3196'. [ 1155.972276][T18763] batman_adv: batadv0: Adding interface: virt_wifi0 [ 1155.979105][T18763] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1156.005832][T18763] batman_adv: batadv0: Interface activated: virt_wifi0 [ 1156.273927][T11022] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 1156.470053][ T30] audit: type=1400 audit(4147484503.946:1088): avc: denied { ioctl } for pid=18755 comm="syz.2.3194" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1156.558597][T18731] fuse: Bad value for 'fd' [ 1156.564253][T11022] usb 3-1: Using ep0 maxpacket: 16 [ 1156.619411][ T30] audit: type=1400 audit(4147484504.026:1089): avc: denied { append } for pid=18730 comm="syz.1.3187" name="mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 1156.643108][ T30] audit: type=1400 audit(4147484504.026:1090): avc: denied { open } for pid=18730 comm="syz.1.3187" path="/dev/input/mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 1156.872200][T18767] vcan1: entered promiscuous mode [ 1156.894870][T11022] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1156.895509][T18767] team0: Device vcan1 is up. Set it down before adding it as a team port [ 1156.906020][T11022] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1156.925865][ T30] audit: type=1400 audit(4147484504.036:1091): avc: denied { read } for pid=18730 comm="syz.1.3187" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 1156.953919][T11022] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1156.964563][T11022] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1156.975327][ T30] audit: type=1400 audit(4147484504.036:1092): avc: denied { open } for pid=18730 comm="syz.1.3187" path="/dev/dri/card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 1157.018128][T11022] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1157.036918][ T30] audit: type=1400 audit(4147484504.036:1093): avc: denied { read write } for pid=18730 comm="syz.1.3187" name="fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 1157.061150][ T30] audit: type=1400 audit(4147484504.036:1094): avc: denied { open } for pid=18730 comm="syz.1.3187" path="/dev/fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 1157.085121][T18135] usb 2-1: USB disconnect, device number 20 [ 1157.086407][T11022] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1157.117046][ T30] audit: type=1400 audit(4147484504.036:1095): avc: denied { mounton } for pid=18730 comm="syz.1.3187" path="/586/file0" dev="tmpfs" ino=3134 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 1157.140747][T11022] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1157.175043][T11022] usb 3-1: Manufacturer: syz [ 1157.180927][ T30] audit: type=1400 audit(4147484504.056:1096): avc: denied { prog_load } for pid=18730 comm="syz.1.3187" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1157.213676][T11022] usb 3-1: config 0 descriptor?? [ 1157.483155][T11022] rc_core: IR keymap rc-hauppauge not found [ 1157.489249][T11022] Registered IR keymap rc-empty [ 1157.497214][T11022] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1157.513277][T18135] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 1157.573313][T11022] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1157.653925][T11022] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 1157.668212][T11022] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input50 [ 1157.693953][T11022] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1157.713286][T11022] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1157.863248][T11022] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1157.874735][T18135] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1157.889133][T18135] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1157.913978][T18135] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1157.935855][T18135] usb 2-1: config 0 descriptor?? [ 1157.944781][T18135] pwc: Askey VC010 type 2 USB webcam detected. [ 1158.015351][T11022] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1158.043609][T11022] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1158.074455][T11022] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1158.105372][T11022] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1158.157458][T18135] pwc: send_video_command error -71 [ 1158.163699][T18135] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 1158.163744][T11022] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1158.171238][T18135] Philips webcam 2-1:0.0: probe with driver Philips webcam failed with error -71 [ 1158.172846][T18135] usb 2-1: USB disconnect, device number 21 [ 1158.243236][T11022] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1158.280141][T11022] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1158.315477][T11022] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1158.349695][T11022] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1158.381040][T11022] usb 3-1: USB disconnect, device number 40 [ 1159.133460][T18135] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 1159.269645][T18135] usb 2-1: device descriptor read/64, error -71 [ 1159.994244][T18135] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 1160.183219][T18135] usb 2-1: device descriptor read/64, error -71 [ 1160.296775][T18135] usb usb2-port1: attempt power cycle [ 1160.543847][ T30] kauditd_printk_skb: 280 callbacks suppressed [ 1160.543869][ T30] audit: type=1326 audit(4147484507.916:1377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18836 comm="syz.2.3216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc69758f749 code=0x7fc00000 [ 1160.812534][ T30] audit: type=1400 audit(4147484508.016:1378): avc: denied { read } for pid=18840 comm="syz.0.3217" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 1161.092728][ T30] audit: type=1400 audit(4147484508.016:1379): avc: denied { open } for pid=18840 comm="syz.0.3217" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 1161.129919][ T30] audit: type=1400 audit(4147484508.106:1380): avc: denied { ioctl } for pid=18840 comm="syz.0.3217" path="socket:[64037]" dev="sockfs" ino=64037 ioctlcmd=0x8903 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1161.165292][ T30] audit: type=1326 audit(4147484508.266:1381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18836 comm="syz.2.3216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc69758f749 code=0x7fc00000 [ 1161.261979][ T30] audit: type=1326 audit(4147484508.266:1382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18836 comm="syz.2.3216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc69758f749 code=0x7fc00000 [ 1161.309161][ T30] audit: type=1326 audit(4147484508.266:1383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18836 comm="syz.2.3216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc69758f749 code=0x7fc00000 [ 1161.341438][T18135] usb usb2-port1: Cannot enable. Maybe the USB cable is bad? [ 1161.352456][ T30] audit: type=1326 audit(4147484508.266:1384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18836 comm="syz.2.3216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc69758f749 code=0x7fc00000 [ 1161.396313][ T30] audit: type=1400 audit(4147484508.606:1385): avc: denied { read write } for pid=18854 comm="syz.2.3220" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 1162.369325][ T30] audit: type=1400 audit(4147484508.606:1386): avc: denied { open } for pid=18854 comm="syz.2.3220" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 1162.392521][T18135] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 1162.405870][T18135] usb 2-1: Using ep0 maxpacket: 32 [ 1162.704087][T18135] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1162.814557][T18135] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1162.845991][T18135] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 1163.263095][T18135] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1163.284478][T18135] usb 2-1: config 0 descriptor?? [ 1163.361406][T18873] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=18873 comm=syz.5.3224 [ 1163.415978][T18873] netlink: 'syz.5.3224': attribute type 1 has an invalid length. [ 1163.530117][T18878] input: syz1 as /devices/virtual/input/input51 [ 1163.562319][T18878] input: failed to attach handler leds to device input51, error: -6 [ 1163.584283][T18877] bond1: (slave bridge1): making interface the new active one [ 1163.613817][T18877] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 1163.713698][T18135] savu 0003:1E7D:2D5A.0025: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.1-1/input0 [ 1163.969978][T11022] usb 2-1: USB disconnect, device number 25 [ 1164.088618][T18897] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3231'. [ 1164.136643][T18889] netlink: 'syz.2.3230': attribute type 1 has an invalid length. [ 1164.171599][T18889] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1164.282096][T18904] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3232'. [ 1164.631821][T18907] fuse: Unknown parameter 'racerPid: 0 [ 1164.631821][T18907] Uid: 0 0 0 0 [ 1164.631821][T18907] Gid: 0 0 0 0 [ 1164.631821][T18907] FDSize: 256 [ 1164.631821][T18907] Groups: 0 10 [ 1164.631821][T18907] NStgid: 324 [ 1164.631821][T18907] NSpid: 325 [ 1164.631821][T18907] NSpgid: 324 [ 1164.631821][T18907] NSsid: 0 [ 1164.631821][T18907] Kthread: 0 [ 1164.631821][T18907] VmPeak: 102032 kB [ 1164.631821][T18907] VmSize: 102032 kB [ 1164.631821][T18907] VmLck: 0 kB [ 1164.631821][T18907] VmPin: 0 kB [ 1164.631821][T18907] VmHWM: 24408 kB [ 1164.631821][T18907] VmRSS: 24408 kB [ 1164.631821][T18907] RssAnon: 1328 kB [ 1164.631821][T18907] RssFile: 23080 kB [ 1164.631821][T18907] RssShmem: 0 kB [ 1164.631821][T18907] VmData: 36588 kB [ 1164.631821][T18907] VmStk: 132 kB [ 1164.631821][T18907] VmExe: 1684 kB [ 1164.631821][T18907] VmLib: 8 kB [ 1164.631821][T18907] VmPTE: 132 kB [ 1164.631821][T18907] VmSwap: 0 kB [ 1164.631821][T18907] HugetlbPages: 0 kB [ 1164.631821][T18907] CoreDumping: 0 [ 1164.631821][T18907] THP_enabled: 1 [ 1164.631821][T18907] untag_mask: 0xffffffffffffffff [ 1164.631821][T18907] Threads: 2 [ 1164.631821][T18907] SigQ: 0/12970 [ 1164.631821][T18907] SigPnd: 0000000000000000 [ 1164.631821][T18907] ShdPnd: 0000000000000000 [ 1164.631821][T18907] SigBlk: 0000000000000000 [ 1164.631821][T18907] SigIgn: fffffffefffaba35 [ 1164.631821][T18907] SigCgt: 0000000100010440 [ 1164.631821][T18907] CapInh: 0000000000000000 [ 1164.631821][T18907] CapPrm: 000001ffff77ffff [ 1164.631821][T18907] CapEff: 000001ffff77ffff [ 1164.631821][T18907] CapBnd: 000001ffffffffff [ 1164.631821][T18907] CapAmb: 0000000000000000 [ 1164.631821][T18907] NoNewPrivs: 0 [ 1164.631821][T18907] Seccomp: 0 [ 1164.631821][T18907] Seccomp_filters: 0 [ 1164.631821][T18907] Speculation_Store_Bypass: thread vulnerable [ 1164.631821][T18907] SpeculationIndirectBranch: conditional enabled [ 1164.631821][T18907] Cpus_allowed: 3 [ 1164.851348][T18910] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3233'. [ 1164.877149][T18910] netlink: 43 bytes leftover after parsing attributes in process `syz.3.3233'. [ 1164.886604][T18910] netlink: 'syz.3.3233': attribute type 6 has an invalid length. [ 1164.898466][T18910] netlink: 'syz.3.3233': attribute type 5 has an invalid length. [ 1164.908550][T18910] netlink: 43 bytes leftover after parsing attributes in process `syz.3.3233'. [ 1164.959155][T18912] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3236'. [ 1164.981390][T18912] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3236'. [ 1165.155017][ T177] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1165.185553][ T177] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1165.283330][T11022] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 1165.335408][T18920] netlink: 'syz.0.3239': attribute type 5 has an invalid length. [ 1165.344138][ T177] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1165.363964][ T177] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1165.390249][T16752] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1165.405993][T16752] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1165.413661][T18919] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3241'. [ 1165.424071][T16752] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1165.434010][T16752] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1165.441543][T16752] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1165.477393][T11022] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1165.524208][T11022] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1165.558068][T11022] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 1165.575965][ T177] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1165.583603][T11022] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1165.587489][ T177] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1165.616098][T11022] usb 3-1: config 0 descriptor?? [ 1165.624714][ T30] kauditd_printk_skb: 43 callbacks suppressed [ 1165.624731][ T30] audit: type=1400 audit(4147484513.106:1430): avc: denied { module_request } for pid=18926 comm="syz.3.3243" kmod="net-pf-10-proto-0-type-3" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 1165.822950][ T177] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1165.843695][T18930] loop7: detected capacity change from 0 to 7 [ 1165.853236][ C0] blk_print_req_error: 5 callbacks suppressed [ 1165.853255][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 1 [ 1165.869436][ C0] buffer_io_error: 5 callbacks suppressed [ 1165.869447][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 1165.891219][ T177] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1165.904356][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 1 [ 1165.913939][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 1165.929627][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 1 [ 1165.939256][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 1165.947764][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 1 [ 1165.957384][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 1165.965535][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 1 [ 1165.975143][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 1165.986529][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 1 [ 1165.996130][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 1166.005325][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 1 [ 1166.014894][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 1166.023323][T18930] ldm_validate_partition_table(): Disk read failed. [ 1166.030466][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 1 [ 1166.040042][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 1166.048129][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 1 [ 1166.057697][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 1166.065779][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 1 [ 1166.075362][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 1166.083710][T18930] Dev loop7: unable to read RDB block 0 [ 1166.094153][T18930] loop7: unable to read partition table [ 1166.100066][T18930] loop7: partition table beyond EOD, truncated [ 1166.106359][T18930] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %֐ȵ4FLQk݊5) failed (rc=-5) [ 1166.120737][T11022] cp2112 0003:10C4:EA90.0026: unknown main item tag 0x0 [ 1166.131421][T11022] cp2112 0003:10C4:EA90.0026: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.2-1/input0 [ 1166.206490][T18921] chnl_net:caif_netlink_parms(): no params data found [ 1166.331069][T11022] cp2112 0003:10C4:EA90.0026: Part Number: 0x82 Device Version: 0xFE [ 1166.392177][T18936] PKCS8: Unsupported PKCS#8 version [ 1166.394747][ T30] audit: type=1400 audit(4147484513.866:1431): avc: denied { create } for pid=18935 comm="syz.0.3244" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 1166.638465][T18938] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3245'. [ 1166.689574][T18943] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3245'. [ 1166.742621][ T30] audit: type=1400 audit(4147484514.226:1432): avc: denied { name_bind } for pid=18937 comm="syz.0.3245" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 1166.985858][T18912] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=18912 comm=syz.2.3236 [ 1167.019210][T11022] cp2112 0003:10C4:EA90.0026: error reading lock byte: -71 [ 1167.035263][T11022] usb 3-1: USB disconnect, device number 41 [ 1167.066429][ T30] audit: type=1400 audit(4147484514.546:1433): avc: denied { append } for pid=18954 comm="syz.5.3250" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1167.263977][T16622] usb 4-1: new full-speed USB device number 23 using dummy_hcd [ 1167.376389][ T177] bond0 (unregistering): Released all slaves [ 1167.455248][T16622] usb 4-1: config 0 has an invalid interface number: 133 but max is 0 [ 1167.468645][T16622] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1167.480439][T16622] usb 4-1: config 0 has no interface number 0 [ 1167.491328][T16622] usb 4-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 1167.502805][T16622] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1167.511820][T16622] usb 4-1: Product: syz [ 1167.516144][T16622] usb 4-1: Manufacturer: syz [ 1167.520765][T16622] usb 4-1: SerialNumber: syz [ 1167.534174][T16959] Bluetooth: hci0: command tx timeout [ 1167.544423][T16622] usb 4-1: config 0 descriptor?? [ 1167.603459][T18961] PKCS7: Unknown OID: [4] (bad) [ 1167.608366][T18961] PKCS7: Only support pkcs7_signedData type [ 1167.645347][ T177] bond1 (unregistering): Released all slaves [ 1167.718109][ T30] audit: type=1400 audit(4147484515.196:1434): avc: denied { sys_module } for pid=18960 comm="syz.5.3252" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 1167.768418][ T30] audit: type=1400 audit(4147484515.226:1435): avc: denied { bind } for pid=18960 comm="syz.5.3252" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1167.805293][ T30] audit: type=1400 audit(4147484515.236:1436): avc: denied { create } for pid=18960 comm="syz.5.3252" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 1167.805923][T16622] keyspan 4-1:0.133: Keyspan 1 port adapter converter detected [ 1167.901940][T16622] keyspan 4-1:0.133: found no endpoint descriptor for endpoint 82 [ 1167.914204][T16622] keyspan 4-1:0.133: found no endpoint descriptor for endpoint 81 [ 1167.928895][T16622] keyspan 4-1:0.133: found no endpoint descriptor for endpoint 1 [ 1167.937735][T16622] keyspan 4-1:0.133: found no endpoint descriptor for endpoint 2 [ 1168.021528][ T177] bond2 (unregistering): Released all slaves [ 1168.035139][ T30] audit: type=1400 audit(4147484515.516:1437): avc: denied { getopt } for pid=18971 comm="syz.2.3254" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1168.069726][ T177] bond3 (unregistering): Released all slaves [ 1168.078549][T16622] usb 4-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 1168.191259][T16622] usb 4-1: USB disconnect, device number 23 [ 1168.221576][T16622] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 1168.261209][T16622] keyspan 4-1:0.133: device disconnected [ 1168.330454][T18967] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1168.367686][ T177] : left promiscuous mode [ 1168.404283][ T30] audit: type=1400 audit(4147484515.886:1438): avc: denied { mount } for pid=18977 comm="syz.0.3255" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 1168.510471][ T177] tipc: Left network mode [ 1168.521791][ T177] IPVS: stopping backup sync thread 14864 ... [ 1168.688020][ T30] audit: type=1400 audit(4147484516.166:1439): avc: denied { create } for pid=18994 comm="syz.3.3257" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 1168.746283][T18995] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1168.759098][T18967] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1168.869526][T18921] bridge0: port 1(bridge_slave_0) entered blocking state [ 1168.900896][T18921] bridge0: port 1(bridge_slave_0) entered disabled state [ 1168.921068][T18921] bridge_slave_0: entered allmulticast mode [ 1168.936340][T18921] bridge_slave_0: entered promiscuous mode [ 1168.955592][T18921] bridge0: port 2(bridge_slave_1) entered blocking state [ 1168.968446][T18921] bridge0: port 2(bridge_slave_1) entered disabled state [ 1168.978917][T18921] bridge_slave_1: entered allmulticast mode [ 1169.005712][T18921] bridge_slave_1: entered promiscuous mode [ 1169.160732][T18967] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1169.262927][T18921] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1169.274374][T19005] syzkaller0: entered promiscuous mode [ 1169.279962][T19005] syzkaller0: entered allmulticast mode [ 1169.291981][T19005] overlayfs: invalid redirect (./file0/file1) [ 1169.302926][T19005] tipc: Enabled bearer , priority 0 [ 1169.311925][T19003] tipc: Resetting bearer [ 1169.333916][T19003] tipc: Disabling bearer [ 1169.354856][T18921] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1169.430709][T18967] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1169.731529][T16959] Bluetooth: hci0: command tx timeout [ 1169.881635][T18921] team0: Port device team_slave_0 added [ 1169.895794][T19023] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3264'. [ 1169.909099][ T177] hsr_slave_0: left promiscuous mode [ 1169.923765][ T177] hsr_slave_1: left promiscuous mode [ 1169.962286][ T177] veth1_macvtap: left promiscuous mode [ 1169.968258][ T177] veth0_macvtap: left promiscuous mode [ 1169.974172][ T177] veth1_vlan: left promiscuous mode [ 1169.979629][ T177] veth0_vlan: left promiscuous mode [ 1171.532317][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 1171.532334][ T30] audit: type=1400 audit(4147484519.006:1450): avc: denied { create } for pid=19035 comm="syz.3.3267" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 1171.561343][ T30] audit: type=1400 audit(4147484519.006:1451): avc: denied { getopt } for pid=19035 comm="syz.3.3267" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 1171.654112][ T30] audit: type=1400 audit(4147484519.136:1452): avc: denied { execute } for pid=19035 comm="syz.3.3267" name="file2" dev="tmpfs" ino=567 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 1171.688004][ T30] audit: type=1400 audit(4147484519.166:1453): avc: denied { execute_no_trans } for pid=19035 comm="syz.3.3267" path="/98/file2" dev="tmpfs" ino=567 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 1171.773546][T16959] Bluetooth: hci0: command tx timeout [ 1172.052151][T18921] team0: Port device team_slave_1 added [ 1172.080444][T19037] netlink: 'syz.3.3267': attribute type 12 has an invalid length. [ 1172.248414][T19040] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3269'. [ 1172.364210][T18921] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1172.381365][T18921] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1172.421867][T18921] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1172.442368][ T4280] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1172.496725][T19040] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3269'. [ 1172.515065][T18921] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1172.522572][T18921] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1172.550161][T18921] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1172.562319][ T30] audit: type=1400 audit(4147484520.046:1454): avc: denied { mount } for pid=19049 comm="syz.0.3271" name="/" dev="ramfs" ino=65699 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 1172.587887][ T4280] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1172.598549][ T30] audit: type=1400 audit(4147484520.046:1455): avc: denied { append } for pid=19049 comm="syz.0.3271" name="vsock" dev="devtmpfs" ino=1313 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1172.624351][ T5952] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 1172.665423][ T4280] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1172.674515][ T30] audit: type=1400 audit(4147484520.156:1456): avc: denied { create } for pid=19051 comm="syz.0.3272" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_dnrt_socket permissive=1 [ 1172.681327][ T4280] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1172.704798][ T5938] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 1172.782194][T18921] hsr_slave_0: entered promiscuous mode [ 1172.792697][ T5952] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1172.891544][ T5938] usb 4-1: device descriptor read/64, error -71 [ 1173.138819][ T30] audit: type=1400 audit(4147484520.276:1457): avc: denied { append } for pid=19055 comm="syz.5.3273" name="001" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 1173.162896][T18921] hsr_slave_1: entered promiscuous mode [ 1173.172556][ T5952] usb 3-1: New USB device found, idVendor=04d9, idProduct=a072, bcdDevice= 0.00 [ 1173.188098][T18921] debugfs: 'hsr0' already exists in 'hsr' [ 1173.194368][ T5952] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1173.206886][T18921] Cannot create hsr debugfs directory [ 1173.213165][ T5938] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 1173.301980][ T30] audit: type=1400 audit(4147484520.486:1458): avc: denied { nlmsg_read } for pid=19055 comm="syz.5.3273" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1173.302622][ T5952] usb 3-1: config 0 descriptor?? [ 1173.337235][ T177] IPVS: stop unused estimator thread 0... [ 1173.429145][ T5938] usb 4-1: device descriptor read/64, error -71 [ 1173.564316][ T5938] usb usb4-port1: attempt power cycle [ 1173.815944][ T5952] holtek_mouse 0003:04D9:A072.0027: item fetching failed at offset 2/5 [ 1173.844985][ T5952] holtek_mouse 0003:04D9:A072.0027: hid parse failed: -22 [ 1173.852227][ T5952] holtek_mouse 0003:04D9:A072.0027: probe with driver holtek_mouse failed with error -22 [ 1173.863295][ T30] audit: type=1400 audit(4147484521.326:1459): avc: denied { create } for pid=19063 comm="syz.5.3274" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 1173.888666][T16959] Bluetooth: hci0: command tx timeout [ 1174.033291][ T5938] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 1174.510478][T17010] usb 3-1: USB disconnect, device number 42 [ 1174.520960][ T5938] usb 4-1: device descriptor read/8, error -71 [ 1174.537899][T18921] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1174.548509][T18921] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1174.560347][T18921] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1174.571244][T18921] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1174.671377][T18921] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1174.767407][ T5938] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 1174.768894][T18921] 8021q: adding VLAN 0 to HW filter on device team0 [ 1174.793093][T14427] bridge0: port 1(bridge_slave_0) entered blocking state [ 1174.800239][T14427] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1174.809668][ T5938] usb 4-1: device descriptor read/8, error -71 [ 1174.820481][T19081] bridge0: port 2(bridge_slave_1) entered blocking state [ 1174.827588][T19081] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1174.934751][ T5938] usb usb4-port1: unable to enumerate USB device [ 1174.959997][T18921] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1175.008893][T17011] usb 1-1: new high-speed USB device number 105 using dummy_hcd [ 1175.136594][T18921] veth0_vlan: entered promiscuous mode [ 1175.143385][T17011] usb 1-1: device descriptor read/64, error -71 [ 1175.149164][T18921] veth1_vlan: entered promiscuous mode [ 1175.170490][T18921] veth0_macvtap: entered promiscuous mode [ 1175.179309][T18921] veth1_macvtap: entered promiscuous mode [ 1175.195681][T18921] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1175.208907][T18921] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1175.236343][T14427] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1175.246466][T14427] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1175.258242][T14427] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1175.291030][T14427] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1175.333674][ T5938] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 1175.350762][T14427] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1175.358917][T14427] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1175.383270][T17011] usb 1-1: new high-speed USB device number 106 using dummy_hcd [ 1175.391110][ T3926] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1175.400389][ T3926] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1175.493229][ T5938] usb 3-1: Using ep0 maxpacket: 16 [ 1175.499829][ T5938] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1175.508826][ T5938] usb 3-1: config 6 has an invalid interface number: 12 but max is 0 [ 1175.518389][ T5938] usb 3-1: config 6 has an invalid interface number: 197 but max is 0 [ 1175.528140][T17011] usb 1-1: device descriptor read/64, error -71 [ 1175.539618][ T5938] usb 3-1: config 6 has an invalid descriptor of length 243, skipping remainder of the config [ 1175.550576][ T5938] usb 3-1: config 6 has 2 interfaces, different from the descriptor's value: 1 [ 1175.559673][ T5938] usb 3-1: config 6 has no interface number 0 [ 1175.566235][ T5938] usb 3-1: config 6 has no interface number 1 [ 1175.572357][ T5938] usb 3-1: config 6 interface 12 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 16 [ 1175.585817][ T5938] usb 3-1: too many endpoints for config 6 interface 197 altsetting 245: 57, using maximum allowed: 30 [ 1175.597075][ T5938] usb 3-1: config 6 interface 197 altsetting 245 has 0 endpoint descriptors, different from the interface descriptor's value: 57 [ 1175.614715][ T5938] usb 3-1: config 6 interface 12 has no altsetting 0 [ 1175.635703][ T5938] usb 3-1: config 6 interface 197 has no altsetting 0 [ 1175.643823][T17010] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 1175.654071][T17011] usb usb1-port1: attempt power cycle [ 1175.664889][ T5938] usb 3-1: New USB device found, idVendor=05c6, idProduct=9001, bcdDevice=41.a7 [ 1175.675760][ T5938] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1175.684552][ T5938] usb 3-1: Product: syz [ 1175.688800][ T5938] usb 3-1: Manufacturer: syz [ 1175.695825][ T5938] usb 3-1: SerialNumber: syz [ 1175.807602][T17010] usb 4-1: New USB device found, idVendor=055f, idProduct=c420, bcdDevice=6a.33 [ 1175.816824][T17010] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1175.826937][T17010] usb 4-1: config 0 descriptor?? [ 1175.834314][T17010] gspca_main: sunplus-2.14.0 probing 055f:c420 [ 1175.925879][ T5938] usb 3-1: USB disconnect, device number 43 [ 1176.013639][T17011] usb 1-1: new high-speed USB device number 107 using dummy_hcd [ 1176.034055][T17011] usb 1-1: device descriptor read/8, error -71 [ 1176.283316][T17011] usb 1-1: new high-speed USB device number 108 using dummy_hcd [ 1176.324040][T17011] usb 1-1: device descriptor read/8, error -71 [ 1176.345905][T17010] gspca_sunplus: reg_w_riv err -110 [ 1176.351348][T17010] sunplus 4-1:0.0: probe with driver sunplus failed with error -110 [ 1176.456473][T17011] usb usb1-port1: unable to enumerate USB device [ 1176.637236][ T30] kauditd_printk_skb: 20 callbacks suppressed [ 1176.637254][ T30] audit: type=1400 audit(4147484524.116:1480): avc: denied { read write } for pid=19111 comm="syz.6.3283" name="sg0" dev="devtmpfs" ino=728 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 1176.682420][ T30] audit: type=1400 audit(4147484524.116:1481): avc: denied { open } for pid=19111 comm="syz.6.3283" path="/dev/sg0" dev="devtmpfs" ino=728 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 1176.706743][ T30] audit: type=1400 audit(4147484524.156:1482): avc: denied { ioctl } for pid=19111 comm="syz.6.3283" path="/dev/sg0" dev="devtmpfs" ino=728 ioctlcmd=0x227d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 1176.773696][T18135] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 1176.816039][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 1176.904116][T18135] usb 3-1: device descriptor read/64, error -71 [ 1176.913547][T16622] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 1177.063620][T16622] usb 7-1: Using ep0 maxpacket: 32 [ 1177.070193][T16622] usb 7-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 1177.080720][T16622] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1177.093842][T16622] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 1177.143601][T18135] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 1177.273627][T18135] usb 3-1: device descriptor read/64, error -71 [ 1177.383710][T18135] usb usb3-port1: attempt power cycle [ 1177.723661][T18135] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 1177.746246][T18135] usb 3-1: device descriptor read/8, error -71 [ 1177.839085][ T30] audit: type=1400 audit(4147484525.316:1483): avc: denied { create } for pid=19116 comm="syz.5.3285" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 1177.860201][ T30] audit: type=1400 audit(4147484525.346:1484): avc: denied { setopt } for pid=19116 comm="syz.5.3285" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 1177.983837][T18135] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 1178.166911][ T30] audit: type=1400 audit(4147484525.466:1485): avc: denied { accept } for pid=19116 comm="syz.5.3285" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 1178.403118][T18135] usb 3-1: device descriptor read/8, error -71 [ 1178.515201][T18135] usb usb3-port1: unable to enumerate USB device [ 1178.533496][T17011] usb 4-1: USB disconnect, device number 28 [ 1178.795577][T17010] usb 7-1: USB disconnect, device number 2 [ 1178.854914][ T30] audit: type=1400 audit(4147484526.336:1486): avc: denied { block_suspend } for pid=19133 comm="syz.3.3289" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1178.878059][T19134] 9p: Bad value for 'wfdno' [ 1178.942529][T19137] tipc: Enabled bearer , priority 0 [ 1178.954116][T19137] syzkaller0: entered promiscuous mode [ 1178.964732][T19137] syzkaller0: entered allmulticast mode [ 1178.973679][T18135] usb 1-1: new high-speed USB device number 109 using dummy_hcd [ 1179.004408][T19137] tipc: Resetting bearer [ 1179.011206][T19136] tipc: Resetting bearer [ 1179.027456][T19136] tipc: Disabling bearer [ 1179.164701][T18135] usb 1-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 1179.175160][T18135] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1179.185626][T18135] usb 1-1: config 0 descriptor?? [ 1179.192162][T18135] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 1179.223802][ T30] audit: type=1400 audit(4147484526.706:1487): avc: denied { connect } for pid=19131 comm="syz.5.3288" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1179.811461][ T30] audit: type=1400 audit(4147484527.266:1488): avc: denied { write } for pid=19149 comm="syz.6.3293" lport=50216 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 1179.983688][T18135] gspca_cpia1: usb_control_msg 03, error -32 [ 1180.003610][T18135] gspca_cpia1: usb_control_msg 03, error -71 [ 1180.020062][T18135] gspca_cpia1: usb_control_msg 01, error -71 [ 1180.031199][T18135] cpia1 1-1:0.0: only firmware version 1 is supported (got: 0) [ 1180.043553][ T30] audit: type=1400 audit(4147484527.276:1489): avc: denied { connect } for pid=19149 comm="syz.6.3293" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1180.066088][T18135] usb 1-1: USB disconnect, device number 109 [ 1180.984073][T19168] xt_cgroup: invalid path, errno=-2 [ 1181.072626][T17010] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 1181.353186][T17010] usb 7-1: Using ep0 maxpacket: 8 [ 1181.376578][T17010] usb 7-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1181.386516][T17010] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1181.471065][T17010] usb 7-1: Product: syz [ 1181.482283][T17010] usb 7-1: Manufacturer: syz [ 1181.493847][T17010] usb 7-1: SerialNumber: syz [ 1181.509752][T17010] usb 7-1: config 0 descriptor?? [ 1182.735399][T19186] batadv_slave_1: entered promiscuous mode [ 1182.751217][T19186] batman_adv: batadv0: Adding interface: macvlan2 [ 1182.758352][T19186] batman_adv: batadv0: The MTU of interface macvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1182.784520][T19186] batman_adv: batadv0: Interface activated: macvlan2 [ 1183.209535][ T30] kauditd_printk_skb: 9 callbacks suppressed [ 1183.209547][ T30] audit: type=1400 audit(4147484530.686:1499): avc: denied { mounton } for pid=19188 comm="syz.2.3304" path="/syzcgroup/unified/syz2" dev="cgroup2" ino=68 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 1183.269120][T16959] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 1183.287221][ T30] audit: type=1400 audit(4147484530.756:1500): avc: denied { bind } for pid=19190 comm="syz.0.3305" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1183.437343][ T30] audit: type=1400 audit(4147484530.766:1501): avc: denied { listen } for pid=19190 comm="syz.0.3305" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1183.466165][T17010] dvb_usb_rtl28xxu 7-1:0.0: chip type detection failed -71 [ 1183.475600][T17010] dvb_usb_rtl28xxu 7-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1183.494845][T17010] usb 7-1: USB disconnect, device number 3 [ 1184.969679][ T30] audit: type=1400 audit(4147484532.446:1502): avc: denied { create } for pid=19203 comm="syz.6.3307" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 1184.998688][ T30] audit: type=1400 audit(4147484532.456:1503): avc: denied { create } for pid=19203 comm="syz.6.3307" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 1184.999441][T19203] [U] ^@^@ [ 1185.433317][ T8701] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 1185.563757][ T5952] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 1185.613218][ T8701] usb 7-1: Using ep0 maxpacket: 16 [ 1185.622928][ T8701] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1185.645423][ T8701] usb 7-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1185.664065][ T8701] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1185.685376][ T8701] usb 7-1: config 0 descriptor?? [ 1185.723843][ T5952] usb 4-1: Using ep0 maxpacket: 16 [ 1185.732737][ T5952] usb 4-1: config 251 has an invalid interface number: 202 but max is 0 [ 1185.742557][ T5952] usb 4-1: config 251 has no interface number 0 [ 1185.749760][ T5952] usb 4-1: config 251 interface 202 altsetting 1 bulk endpoint 0x1 has invalid maxpacket 16 [ 1185.761398][ T5952] usb 4-1: config 251 interface 202 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 1185.774165][ T5952] usb 4-1: config 251 interface 202 altsetting 1 endpoint 0x6 has invalid maxpacket 1024, setting to 64 [ 1185.786916][ T5952] usb 4-1: config 251 interface 202 altsetting 1 has an endpoint descriptor with address 0xC1, changing to 0x81 [ 1185.801259][ T5952] usb 4-1: config 251 interface 202 altsetting 1 endpoint 0x81 has invalid maxpacket 13688, setting to 1024 [ 1185.814778][ T5952] usb 4-1: config 251 interface 202 altsetting 1 bulk endpoint 0x81 has invalid maxpacket 1024 [ 1185.827172][ T5952] usb 4-1: config 251 interface 202 altsetting 1 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 1185.842588][ T5952] usb 4-1: config 251 interface 202 has no altsetting 0 [ 1185.855889][ T5952] usb 4-1: New USB device found, idVendor=0572, idProduct=cb00, bcdDevice=bb.c9 [ 1185.865857][ T5952] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1185.875065][ T5952] usb 4-1: Product: syz [ 1185.881224][ T5952] usb 4-1: Manufacturer: syz [ 1185.887385][ T5952] usb 4-1: SerialNumber: syz [ 1185.895958][T19214] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1185.906371][T19214] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1185.936823][ T8701] usbhid 7-1:0.0: can't add hid device: -71 [ 1185.949389][ T8701] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 1185.970276][ T8701] usb 7-1: USB disconnect, device number 4 [ 1186.291597][ C0] vxcan0: j1939_tp_rxtimer: 0xffff88803c77c800: rx timeout, send abort [ 1186.346245][T19229] netlink: 60 bytes leftover after parsing attributes in process `syz.6.3313'. [ 1186.396122][ T30] audit: type=1400 audit(4147484533.876:1504): avc: denied { write } for pid=19228 comm="syz.6.3313" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 1186.520439][ T5952] cxacru 4-1:251.202: send of cm 0x90 failed (-71) [ 1186.565084][ T5952] cxacru 4-1:251.202: usbatm_usb_probe: invalid endpoint 02! [ 1186.641641][ T5952] cxacru 4-1:251.202: probe with driver cxacru failed with error -22 [ 1186.693309][ T5819] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 1186.713463][ T5952] usb 4-1: USB disconnect, device number 29 [ 1186.791693][ C0] vxcan0: j1939_tp_rxtimer: 0xffff88803c77e400: rx timeout, send abort [ 1186.802024][ C0] vxcan0: j1939_tp_rxtimer: 0xffff88803c77c800: abort rx timeout. Force session deactivation [ 1187.300048][ C0] vxcan0: j1939_tp_rxtimer: 0xffff88803c77e400: abort rx timeout. Force session deactivation [ 1187.414088][ T5819] usb 3-1: device descriptor read/64, error -71 [ 1187.414473][ T30] audit: type=1400 audit(4147484534.576:1505): avc: denied { shutdown } for pid=19243 comm="syz.6.3317" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1187.485127][ T30] audit: type=1400 audit(4147484534.926:1506): avc: denied { connect } for pid=19246 comm="syz.5.3318" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1187.653706][ T5819] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 1187.661379][ T30] audit: type=1400 audit(4147484535.136:1507): avc: denied { read append } for pid=19255 comm="syz.5.3320" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 1187.863216][ T5819] usb 3-1: device descriptor read/64, error -71 [ 1188.154887][ T5819] usb usb3-port1: attempt power cycle [ 1188.396397][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 1188.396429][ T30] audit: type=1400 audit(4147484535.676:1514): avc: denied { ioctl } for pid=19264 comm="syz.5.3324" path="/dev/rtc0" dev="devtmpfs" ino=921 ioctlcmd=0x7003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 1188.584515][T18135] IPVS: starting estimator thread 0... [ 1188.613464][T19276] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1188.627996][T19276] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1188.635399][ T30] audit: type=1326 audit(4147484535.686:1515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19264 comm="syz.5.3324" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb31938f749 code=0x7ffc0000 [ 1188.661782][ T5819] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 1188.675037][ T30] audit: type=1326 audit(4147484535.686:1516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19264 comm="syz.5.3324" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb31938f749 code=0x7ffc0000 [ 1188.703592][ T30] audit: type=1326 audit(4147484535.686:1517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19264 comm="syz.5.3324" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb31938f749 code=0x7ffc0000 [ 1188.723993][ T5819] usb 3-1: device descriptor read/8, error -71 [ 1188.727911][T19272] IPVS: using max 76 ests per chain, 182400 per kthread [ 1188.741619][ T30] audit: type=1326 audit(4147484535.686:1518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19264 comm="syz.5.3324" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb31938f749 code=0x7ffc0000 [ 1188.768916][ T30] audit: type=1326 audit(4147484535.686:1519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19264 comm="syz.5.3324" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb31938f749 code=0x7ffc0000 [ 1188.793102][ T30] audit: type=1326 audit(4147484535.686:1520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19264 comm="syz.5.3324" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb31938f749 code=0x7ffc0000 [ 1188.821750][ T30] audit: type=1326 audit(4147484535.696:1521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19264 comm="syz.5.3324" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb31938f749 code=0x7ffc0000 [ 1188.850869][ T30] audit: type=1326 audit(4147484535.696:1522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19264 comm="syz.5.3324" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb31938f749 code=0x7ffc0000 [ 1188.879624][ T30] audit: type=1326 audit(4147484535.696:1523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19264 comm="syz.5.3324" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb31938f749 code=0x7ffc0000 [ 1188.903927][T17011] usb 7-1: new full-speed USB device number 5 using dummy_hcd [ 1188.993784][ T5819] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 1189.016973][ T5819] usb 3-1: device descriptor read/8, error -71 [ 1189.053217][T17011] usb 7-1: device descriptor read/64, error -71 [ 1189.063715][T19284] CIFS: Unable to determine destination address [ 1189.166305][ T5819] usb usb3-port1: unable to enumerate USB device [ 1189.393222][T17011] usb 7-1: new full-speed USB device number 6 using dummy_hcd [ 1189.573318][T17011] usb 7-1: device descriptor read/64, error -71 [ 1189.859744][T17011] usb usb7-port1: attempt power cycle [ 1190.369813][T17011] usb 7-1: new full-speed USB device number 7 using dummy_hcd [ 1190.442913][T17011] usb 7-1: device descriptor read/8, error -71 [ 1190.737778][T17011] usb 7-1: new full-speed USB device number 8 using dummy_hcd [ 1191.045059][T17011] usb 7-1: device descriptor read/8, error -71 [ 1191.150626][T19310] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3336'. [ 1191.241470][T17011] usb usb7-port1: unable to enumerate USB device [ 1191.353254][T17105] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 1191.613360][T17105] usb 4-1: Using ep0 maxpacket: 16 [ 1191.621063][T17105] usb 4-1: too many configurations: 9, using maximum allowed: 8 [ 1191.649055][T17105] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1191.674382][T17105] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1191.706145][T17105] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1191.727583][T17105] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1191.748551][T17105] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1191.763748][T17105] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1191.811825][T17105] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1191.834445][T17105] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1191.857357][T17105] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1191.883840][T17105] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1191.910353][T17105] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1191.940108][T17105] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1191.952211][T17105] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1191.983086][T17105] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1192.013772][T17105] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1192.042509][T17105] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1192.062680][T17105] usb 4-1: New USB device found, idVendor=17ef, idProduct=60a3, bcdDevice= 0.00 [ 1192.081981][T17105] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1192.114586][T17105] usb 4-1: config 0 descriptor?? [ 1192.345940][T19308] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1192.355687][T19308] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1192.413417][T17011] usb 3-1: new full-speed USB device number 52 using dummy_hcd [ 1192.624277][T17105] usbhid 4-1:0.0: can't add hid device: -71 [ 1192.630274][T17105] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1192.654740][T17011] usb 3-1: New USB device found, idVendor=13d8, idProduct=0020, bcdDevice=f7.31 [ 1192.664062][T17011] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1192.679210][T17105] usb 4-1: USB disconnect, device number 30 [ 1192.687834][T17011] usb 3-1: config 0 descriptor?? [ 1192.711549][T17011] usb 3-1: selecting invalid altsetting 3 [ 1192.773946][T17011] comedi comedi4: could not set alternate setting 3 in high speed [ 1192.781856][T17011] usbduxsigma 3-1:0.0: driver 'usbduxsigma' failed to auto-configure device. [ 1192.800382][T17011] usbduxsigma 3-1:0.0: probe with driver usbduxsigma failed with error -22 [ 1192.908853][T18135] usb 3-1: USB disconnect, device number 52 [ 1193.580961][T19352] mac80211_hwsim hwsim20 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1194.928731][T19376] vivid-000: ================= START STATUS ================= [ 1194.936911][T19376] vivid-000: Enable Output Cropping: true [ 1194.942648][T19376] vivid-000: Enable Output Composing: false [ 1194.950172][T19376] vivid-000: Enable Output Scaler: true [ 1194.957047][T19376] vivid-000: Tx RGB Quantization Range: Automatic [ 1194.964471][T19376] vivid-000: Transmit Mode: HDMI [ 1194.972700][T19376] vivid-000: Hotplug Present: 0x00000000 [ 1194.979858][T19376] vivid-000: RxSense Present: 0x00000000 [ 1194.986882][T19376] vivid-000: EDID Present: 0x00000000 [ 1194.992472][T19376] vivid-000: ================== END STATUS ================== [ 1195.185371][T19384] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3358'. [ 1195.259659][T19385] bridge: RTM_NEWNEIGH with invalid ether address [ 1195.729571][T19386] binder: 19383:19386 ioctl c0306201 200000000640 returned -22 [ 1195.737901][ T30] kauditd_printk_skb: 25 callbacks suppressed [ 1195.737919][ T30] audit: type=1400 audit(4147484543.206:1549): avc: denied { ioctl } for pid=19383 comm="syz.6.3358" path="/dev/binderfs/binder0" dev="binder" ino=16 ioctlcmd=0x6201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 1196.088849][ T30] audit: type=1400 audit(4147484543.566:1550): avc: denied { bind } for pid=19388 comm="syz.5.3359" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1196.304708][T19396] dlm: no locking on control device [ 1196.346540][T19396] hpfs: hpfs_map_sector(): read error [ 1196.690023][ T30] audit: type=1400 audit(4147484544.166:1551): avc: denied { create } for pid=19393 comm="syz.6.3361" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1196.983640][T18454] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 1197.373611][T18454] usb 7-1: Using ep0 maxpacket: 32 [ 1197.391590][T18454] usb 7-1: config 8 has an invalid interface number: 203 but max is 0 [ 1197.426546][T18454] usb 7-1: config 8 has no interface number 0 [ 1197.453178][T18454] usb 7-1: config 8 interface 203 altsetting 1 has an endpoint descriptor with address 0x93, changing to 0x83 [ 1197.489595][T18454] usb 7-1: config 8 interface 203 altsetting 1 bulk endpoint 0x83 has invalid maxpacket 1024 [ 1197.505637][T18454] usb 7-1: config 8 interface 203 altsetting 1 endpoint 0x88 has invalid wMaxPacketSize 0 [ 1197.519786][T18454] usb 7-1: config 8 interface 203 altsetting 1 bulk endpoint 0x88 has invalid maxpacket 0 [ 1197.550112][T18454] usb 7-1: config 8 interface 203 has no altsetting 0 [ 1197.572711][T18454] usb 7-1: New USB device found, idVendor=054c, idProduct=06c3, bcdDevice=eb.7a [ 1197.585206][T18454] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1197.599855][T18454] usb 7-1: Product: syz [ 1197.604351][T18454] usb 7-1: Manufacturer: syz [ 1197.608947][T18454] usb 7-1: SerialNumber: syz [ 1197.625256][ T30] audit: type=1400 audit(4147484545.096:1552): avc: denied { ioctl } for pid=19425 comm="syz.2.3369" path="/dev/vhost-vsock" dev="devtmpfs" ino=1275 ioctlcmd=0x9434 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 1197.664502][T19397] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 1198.211588][T19436] bridge: RTM_NEWNEIGH with invalid ether address [ 1199.297637][T18454] port100 7-1:8.203: NFC: Could not find bulk-in or bulk-out endpoint [ 1199.337147][T18454] usb 7-1: USB disconnect, device number 9 [ 1199.364472][T19446] syzkaller1: entered promiscuous mode [ 1199.412595][T19446] syzkaller1: entered allmulticast mode [ 1199.479770][ T30] audit: type=1400 audit(4147484546.926:1553): avc: denied { listen } for pid=19448 comm="syz.6.3377" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1199.500341][T19455] misc userio: Invalid payload size [ 1199.545275][T19446] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.3376'. [ 1199.843357][T19452] netlink: 'syz.6.3377': attribute type 39 has an invalid length. [ 1199.888153][ T30] audit: type=1400 audit(4147484546.926:1554): avc: denied { create } for pid=19448 comm="syz.6.3377" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 1199.975283][ T30] audit: type=1400 audit(4147484546.956:1555): avc: denied { write } for pid=19448 comm="syz.6.3377" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 1199.975302][T18454] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 1200.107874][ T30] audit: type=1400 audit(4147484547.096:1556): avc: denied { name_connect } for pid=19448 comm="syz.6.3377" dest=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 1200.404150][T19467] mkiss: ax0: crc mode is auto. [ 1201.239323][ T30] audit: type=1400 audit(4147484548.716:1557): avc: denied { write } for pid=19466 comm="syz.3.3381" name="rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 1201.543480][ T30] audit: type=1400 audit(4147484549.016:1558): avc: denied { shutdown } for pid=19470 comm="syz.0.3382" lport=9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1201.630673][ T30] audit: type=1400 audit(4147484549.026:1559): avc: denied { mount } for pid=19470 comm="syz.0.3382" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 1201.797826][ T30] audit: type=1400 audit(4147484549.256:1560): avc: denied { setopt } for pid=19476 comm="syz.2.3385" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 1201.913115][ T30] audit: type=1400 audit(4147484549.256:1561): avc: denied { setopt } for pid=19476 comm="syz.2.3385" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1202.264353][ T30] audit: type=1400 audit(4147484549.746:1562): avc: denied { ioctl } for pid=19488 comm="syz.2.3387" path="user:[4026531837]" dev="nsfs" ino=4026531837 ioctlcmd=0xf50c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 1202.509081][T19491] netlink: 'syz.2.3387': attribute type 4 has an invalid length. [ 1202.517083][T19491] netlink: 17 bytes leftover after parsing attributes in process `syz.2.3387'. [ 1204.074338][ T30] audit: type=1400 audit(4147484551.556:1563): avc: denied { read } for pid=19511 comm="syz.2.3393" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 1204.161042][ T30] audit: type=1400 audit(4147484551.556:1564): avc: denied { open } for pid=19511 comm="syz.2.3393" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 1204.221538][ T30] audit: type=1400 audit(4147484551.666:1565): avc: denied { getopt } for pid=19511 comm="syz.2.3393" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1204.244673][T19515] tipc: Started in network mode [ 1204.249596][T19515] tipc: Node identity e6587abc7be9, cluster identity 4711 [ 1204.287548][T19515] tipc: Enabled bearer , priority 0 [ 1204.330595][T19521] syzkaller0: entered promiscuous mode [ 1204.423753][T19521] syzkaller0: entered allmulticast mode [ 1204.446683][T19522] bridge: RTM_NEWNEIGH with invalid ether address [ 1204.593537][T19515] tipc: Resetting bearer [ 1204.624809][T19514] tipc: Resetting bearer [ 1204.761603][T19514] tipc: Disabling bearer [ 1205.501889][ T30] audit: type=1400 audit(4147484552.976:1566): avc: denied { write } for pid=19542 comm="syz.3.3401" path="socket:[68822]" dev="sockfs" ino=68822 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 1205.603865][T19546] ip6t_srh: unknown srh match flags FF3F [ 1206.198610][T19404] Set syz1 is full, maxelem 65536 reached [ 1206.372970][T19557] genirq: Flags mismatch irq 4. 00200000 (das16m1) vs. 00200080 (ttyS0) [ 1206.708817][T19566] netlink: 'syz.2.3406': attribute type 1 has an invalid length. [ 1207.088810][T19571] ubi: mtd0 is already attached to ubi31 [ 1207.449161][T19576] [ 1207.451528][T19576] ====================================================== [ 1207.458549][T19576] WARNING: possible circular locking dependency detected [ 1207.465580][T19576] syzkaller #0 Tainted: G L [ 1207.471562][T19576] ------------------------------------------------------ [ 1207.478589][T19576] syz.5.3408/19576 is trying to acquire lock: [ 1207.484653][T19576] ffff8880764a2888 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x28f/0x570 [ 1207.493986][T19576] [ 1207.493986][T19576] but task is already holding lock: [ 1207.501341][T19576] ffff888040f2e868 (&pipe->mutex){+.+.}-{4:4}, at: pipe_lock+0x64/0x80 [ 1207.509618][T19576] [ 1207.509618][T19576] which lock already depends on the new lock. [ 1207.509618][T19576] [ 1207.520024][T19576] [ 1207.520024][T19576] the existing dependency chain (in reverse order) is: [ 1207.529019][T19576] [ 1207.529019][T19576] -> #2 (&pipe->mutex){+.+.}-{4:4}: [ 1207.536467][T19576] __mutex_lock+0x1aa/0x1ca0 [ 1207.541572][T19576] anon_pipe_write+0x15d/0x1bd0 [ 1207.546929][T19576] __kernel_write_iter+0x720/0xb10 [ 1207.552544][T19576] __kernel_write+0xf5/0x140 [ 1207.557643][T19576] autofs_notify_daemon+0x4db/0xd60 [ 1207.563373][T19576] autofs_wait+0x10f3/0x1ac0 [ 1207.568476][T19576] autofs_mount_wait+0x132/0x3c0 [ 1207.573920][T19576] autofs_d_automount+0x4b2/0x960 [ 1207.579448][T19576] __traverse_mounts+0x1b9/0x830 [ 1207.584897][T19576] step_into_slowpath+0x772/0xf50 [ 1207.590428][T19576] path_lookupat+0x627/0xc40 [ 1207.595541][T19576] filename_lookup+0x224/0x5f0 [ 1207.600812][T19576] kern_path+0x35/0x50 [ 1207.605391][T19576] lookup_bdev+0xd8/0x280 [ 1207.610227][T19576] resume_store+0x1d6/0x490 [ 1207.615236][T19576] kobj_attr_store+0x58/0x80 [ 1207.620334][T19576] sysfs_kf_write+0xf2/0x150 [ 1207.625432][T19576] kernfs_fop_write_iter+0x3af/0x570 [ 1207.631225][T19576] vfs_write+0x7d3/0x11d0 [ 1207.636067][T19576] ksys_write+0x12a/0x250 [ 1207.640901][T19576] do_syscall_64+0xcd/0xf80 [ 1207.645910][T19576] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1207.652303][T19576] [ 1207.652303][T19576] -> #1 (&sbi->pipe_mutex){+.+.}-{4:4}: [ 1207.660014][T19576] __mutex_lock+0x1aa/0x1ca0 [ 1207.665112][T19576] autofs_notify_daemon+0x4a6/0xd60 [ 1207.670832][T19576] autofs_wait+0x10f3/0x1ac0 [ 1207.675931][T19576] autofs_mount_wait+0x132/0x3c0 [ 1207.681372][T19576] autofs_d_automount+0x4b2/0x960 [ 1207.686899][T19576] __traverse_mounts+0x1b9/0x830 [ 1207.692348][T19576] step_into_slowpath+0x772/0xf50 [ 1207.697891][T19576] path_lookupat+0x627/0xc40 [ 1207.702987][T19576] filename_lookup+0x224/0x5f0 [ 1207.708257][T19576] kern_path+0x35/0x50 [ 1207.712833][T19576] lookup_bdev+0xd8/0x280 [ 1207.717671][T19576] resume_store+0x1d6/0x490 [ 1207.722682][T19576] kobj_attr_store+0x58/0x80 [ 1207.727780][T19576] sysfs_kf_write+0xf2/0x150 [ 1207.732878][T19576] kernfs_fop_write_iter+0x3af/0x570 [ 1207.738680][T19576] vfs_write+0x7d3/0x11d0 [ 1207.743514][T19576] ksys_write+0x12a/0x250 [ 1207.748350][T19576] do_syscall_64+0xcd/0xf80 [ 1207.753359][T19576] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1207.759843][T19576] [ 1207.759843][T19576] -> #0 (&of->mutex){+.+.}-{4:4}: [ 1207.767030][T19576] __lock_acquire+0x1669/0x2890 [ 1207.772398][T19576] lock_acquire+0x179/0x330 [ 1207.777403][T19576] __mutex_lock+0x1aa/0x1ca0 [ 1207.782501][T19576] kernfs_fop_write_iter+0x28f/0x570 [ 1207.788300][T19576] iter_file_splice_write+0xa24/0x12b0 [ 1207.794272][T19576] do_splice+0x1478/0x1fc0 [ 1207.799198][T19576] __do_splice+0x32a/0x360 [ 1207.804130][T19576] __x64_sys_splice+0x187/0x250 [ 1207.809492][T19576] do_syscall_64+0xcd/0xf80 [ 1207.814505][T19576] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1207.820899][T19576] [ 1207.820899][T19576] other info that might help us debug this: [ 1207.820899][T19576] [ 1207.831105][T19576] Chain exists of: [ 1207.831105][T19576] &of->mutex --> &sbi->pipe_mutex --> &pipe->mutex [ 1207.831105][T19576] [ 1207.843516][T19576] Possible unsafe locking scenario: [ 1207.843516][T19576] [ 1207.850948][T19576] CPU0 CPU1 [ 1207.856297][T19576] ---- ---- [ 1207.861638][T19576] lock(&pipe->mutex); [ 1207.865778][T19576] lock(&sbi->pipe_mutex); [ 1207.872777][T19576] lock(&pipe->mutex); [ 1207.879429][T19576] lock(&of->mutex); [ 1207.883388][T19576] [ 1207.883388][T19576] *** DEADLOCK *** [ 1207.883388][T19576] [ 1207.891509][T19576] 2 locks held by syz.5.3408/19576: [ 1207.896682][T19576] #0: ffff8880356ca420 (sb_writers#8){.+.+}-{0:0}, at: __do_splice+0x32a/0x360 [ 1207.905724][T19576] #1: ffff888040f2e868 (&pipe->mutex){+.+.}-{4:4}, at: pipe_lock+0x64/0x80 [ 1207.914411][T19576] [ 1207.914411][T19576] stack backtrace: [ 1207.920279][T19576] CPU: 1 UID: 0 PID: 19576 Comm: syz.5.3408 Tainted: G L syzkaller #0 PREEMPT(full) [ 1207.920303][T19576] Tainted: [L]=SOFTLOCKUP [ 1207.920308][T19576] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1207.920318][T19576] Call Trace: [ 1207.920324][T19576] [ 1207.920330][T19576] dump_stack_lvl+0x116/0x1f0 [ 1207.920352][T19576] print_circular_bug+0x275/0x340 [ 1207.920370][T19576] check_noncircular+0x146/0x160 [ 1207.920389][T19576] __lock_acquire+0x1669/0x2890 [ 1207.920408][T19576] ? __do_splice+0x32a/0x360 [ 1207.920429][T19576] ? do_syscall_64+0xcd/0xf80 [ 1207.920450][T19576] lock_acquire+0x179/0x330 [ 1207.920467][T19576] ? kernfs_fop_write_iter+0x28f/0x570 [ 1207.920491][T19576] ? __pfx___might_resched+0x10/0x10 [ 1207.920507][T19576] __mutex_lock+0x1aa/0x1ca0 [ 1207.920527][T19576] ? kernfs_fop_write_iter+0x28f/0x570 [ 1207.920551][T19576] ? kernfs_fop_write_iter+0x28f/0x570 [ 1207.920574][T19576] ? __asan_memcpy+0x3c/0x60 [ 1207.920590][T19576] ? _copy_from_iter+0x161/0x16c0 [ 1207.920614][T19576] ? __pfx___mutex_lock+0x10/0x10 [ 1207.920635][T19576] ? __pfx__copy_from_iter+0x10/0x10 [ 1207.920658][T19576] ? trace_kmalloc+0x2b/0xb0 [ 1207.920676][T19576] ? __kmalloc_noprof+0x35d/0x910 [ 1207.920700][T19576] ? kernfs_fop_write_iter+0x237/0x570 [ 1207.920724][T19576] ? kernfs_fop_write_iter+0x28f/0x570 [ 1207.920746][T19576] kernfs_fop_write_iter+0x28f/0x570 [ 1207.920770][T19576] iter_file_splice_write+0xa24/0x12b0 [ 1207.920798][T19576] ? __pfx_iter_file_splice_write+0x10/0x10 [ 1207.920823][T19576] ? __pfx_try_to_wake_up+0x10/0x10 [ 1207.920850][T19576] ? __pfx_iter_file_splice_write+0x10/0x10 [ 1207.920874][T19576] do_splice+0x1478/0x1fc0 [ 1207.920896][T19576] ? __lock_acquire+0x436/0x2890 [ 1207.920916][T19576] ? __pfx_do_splice+0x10/0x10 [ 1207.920938][T19576] ? __pfx_pipe_clear_nowait+0x10/0x10 [ 1207.920959][T19576] ? find_held_lock+0x2b/0x80 [ 1207.920982][T19576] __do_splice+0x32a/0x360 [ 1207.921005][T19576] ? __pfx___do_splice+0x10/0x10 [ 1207.921026][T19576] ? __x64_sys_openat+0xf0/0x210 [ 1207.921043][T19576] __x64_sys_splice+0x187/0x250 [ 1207.921066][T19576] do_syscall_64+0xcd/0xf80 [ 1207.921085][T19576] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1207.921107][T19576] RIP: 0033:0x7fb31938f749 [ 1207.921119][T19576] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1207.921134][T19576] RSP: 002b:00007fb3175cd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 1207.921148][T19576] RAX: ffffffffffffffda RBX: 00007fb3195e6090 RCX: 00007fb31938f749 [ 1207.921159][T19576] RDX: 0000000000000006 RSI: 0000000000000000 RDI: 0000000000000004 [ 1207.921167][T19576] RBP: 00007fb319413f91 R08: 000000000000bfd1 R09: 0000000000000000 [ 1207.921176][T19576] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1207.921186][T19576] R13: 00007fb3195e6128 R14: 00007fb3195e6090 R15: 00007ffdf1d5bf98 [ 1207.921200][T19576] [ 1208.285356][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 1208.285373][ T30] audit: type=1400 audit(4147484555.766:1569): avc: denied { write } for pid=19574 comm="syz.6.3410" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 1208.285437][T19575] lo speed is unknown, defaulting to 1000 [ 1208.318768][T19575] lo speed is unknown, defaulting to 1000 [ 1208.325037][T19575] lo speed is unknown, defaulting to 1000 [ 1208.332798][T19575] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 1208.358788][T19575] lo speed is unknown, defaulting to 1000 [ 1208.365536][T19575] lo speed is unknown, defaulting to 1000 [ 1208.371584][T19575] lo speed is unknown, defaulting to 1000 [ 1208.377998][T19575] lo speed is unknown, defaulting to 1000 [ 1208.384402][T19575] lo speed is unknown, defaulting to 1000 [ 1208.390422][T19575] lo speed is unknown, defaulting to 1000 [ 1208.397323][T19575] lo speed is unknown, defaulting to 1000 [ 1208.452658][ T30] audit: type=1400 audit(4147484555.926:1570): avc: denied { getopt } for pid=19568 comm="syz.5.3408" lport=42405 faddr=::ffff:172.20.255.187 fport=65532 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 1208.452764][T19576] sctp: [Deprecated]: syz.5.3408 (pid 19576) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1208.452764][T19576] Use struct sctp_sack_info instead [ 1208.544988][ T30] audit: type=1400 audit(4147484556.026:1571): avc: denied { unmount } for pid=16750 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1